CVE-2026-73632 Apache Struts: Shared serialization state in the JSON plugin

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing response content associated with one request to become observable in another. Only the SMD / JSON-RPC handling of the...

CVE-2026-73632

creationtimestamp| type| source ---|---|--- 2026-08-14 10:24:15+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mszwwgaw2c23 2026-08-15 13:02:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3sx3c5wawxgjf...