CVE-2026-104712

This asymmetric resource consumption (amplification) vulnerability in Apache Struts allows an unauthenticated remote attacker to exhaust server CPU and outbound network capacity . The issue occurs when a request parameter is bound to a java.math.BigDecimal property and subsequently rendered via t...