{"vulnerability": "cve-2026-104711", "sightings": [{"uuid": "786dd11d-61e4-4cf6-83bf-65b2646d99ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104711", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mx55w32psn22", "content": "Struts 7.4.0 fixes four Apache Struts vulnerabilities, including OGNL injection CVE-2026-104711 and a REST plugin DoS. Upgrade now.\n\n#ApacheStruts #Struts #CVE2026104711 #CVE2026104713 #CVE2026104714 #OGNL #JavaSecurity #Vulnerability", "creation_timestamp": "2026-10-05T14:48:04.549659Z"}, {"uuid": "97dcbbba-e7ee-4b2c-a439-d0e6d9cc4d26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104711", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/e4jfkjgyxwaie", "content": "CVE-2026-104711: Apache Struts: OGNL injection in the legacy RESTful action mapper", "creation_timestamp": "2026-10-05T18:16:53.931195Z"}, {"uuid": "1b0e7f48-08c2-4307-88b5-b4fea1f263e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104711", "type": "seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxbewhy3cn27", "content": "Vuln\u00e9rabilit\u00e9s critiques (CVSS \u2265 9) \u00b7 6\n\u2022 Langflow (CVE-2026-105697), CVSS 9.9 (Langflow)\n\u2022 Apache Struts (legacy REST Action Mappers) (CVE-2026-104711), CVSS 9.8 (Apache)\n\u2022 Dell System Update (Serveurs Dell PowerEdge) (CVE-2026-86360), CVSS 9.6 (it-connect.fr)", "creation_timestamp": "2026-10-07T07:04:12.076607Z"}, {"uuid": "84a881eb-5029-477c-b8b5-f2207b7f7cf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104711", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcga26co72w", "content": "CVE-2026-104711 - apache struts\nVersions of Apache Struts that use the old RESTful action mapper can be tricked by a specially crafted web request to run arbitrary code on the server. This risk\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachestruts #apachefoundation #CVE #infosec", "creation_timestamp": "2026-10-07T17:00:06.595563Z"}, {"uuid": "8488b4d6-c5ba-45a2-99fa-df1a235a4846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104711", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mxh5454yed2w", "content": "\ud83d\udd17 CVE : CVE-2026-104711, CVE-2026-104712, CVE-2026-104713, CVE-2026-104714", "creation_timestamp": "2026-10-09T14:00:10.375897Z"}]}