Exploit for CVE-2026-73633

CVE-2026-73633 Apache Struts S2-072 — PoC + Environment...

CVE-2026-73633 Apache Struts: Unbounded read of a JSON request body

Uncontrolled resource consumption vulnerability in the JSON plugin of Apache Struts. When an application is configured to populate actions from a JSON request body, the plugin reads that body into memory without bounding how much it will accept, so a single request can exhaust the heap and deny...

CVE-2026-73633

The Apache Struts JSON plugin is vulnerable to an uncontrolled resource consumption issue (S2-072) when an application is configured to populate actions from a JSON request body. The underlying cause is that the plugin reads the request body into memory without a proper bound, as the configurable...

CVE-2026-73633 Apache Struts: Unbounded read of a JSON request body

Uncontrolled resource consumption vulnerability in the JSON plugin of Apache Struts. When an application is configured to populate actions from a JSON request body, the plugin reads that body into memory without bounding how much it will accept, so a single request can exhaust the heap and deny...

CVE-2026-73633

creationtimestamp| type| source ---|---|--- 2026-08-14 10:24:14+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mszwwgaw2c23 2026-08-14 15:05:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jvwghj6uyrim5 2026-08-14 16:00:47+00:00| seen|...