Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2018-11776

99
FAUCET Score

CVE-2018-11776 is a critical Remote Code Execution (RCE) vulnerability affecting Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16, specifically when the alwaysSelectFullNamespace option is enabled and certain conditions regarding namespaces in results or URL tags are met. This vulnerability carries a high CVSS score of 8.1, indicating a severe risk with a network attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. It is actively exploited in the wild, as evidenced by its presence in the KEV catalog and numerous public exploit modules, and has garnered significant community and media attention.

Impacted Technologies

VendorProductVersion(s)CPE
>= 2.0.4, < 2.3.35CPE matchmatch criteria
cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*
>= 2.5.0, < 2.5.17CPE matchmatch criteria
cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*
>= 7.3CPE matchmatch criteria
cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*
>= 9.5CPE matchmatch criteria
cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*
Range not provided by sourceCPE matchmatch criteria
cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

8.1HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
2.2
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
99.99%
Probability of exploitation in next 30 days
EPSS Percentile
100.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
Added to KEV · Nov 3, 2021
Metasploit: Apache Struts 2 Namespace Redirect OGNL Injection · Aug 22, 2018
Nuclei: CVE-2018-11776 · Feb 24, 2021
ExploitDB: EDB-45367 · Sep 10, 2018
This CVE's current EPSS score of 0.9999 is in the 100th percentile among its peer group of 8,913 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (3)

mavenpatch availablevia ghsa
Product: org.apache.struts:struts2-coreFixed in: 2.3.35
mavenpatch availablevia ghsa
Product: org.apache.struts:struts2-coreFixed in: 2.5.17
oraclepatch availablevia nvd_reference
View patch

Vendor Advisories (2)

mavenGHSA-cr6j-3jp9-rw65high

Apache Struts vulnerable to remote command execution (RCE) due to improper input validation

Oct 18, 2018
redhatCVE-2018-11776Critical

struts2: Using specific results and namespaces can result in a remote code execution

Aug 22, 2018

References

cisa.gov / known-exploited-vulnerabilities-catalog
US Government Resource
packetstormsecurity.com / files/172830/Apache-Struts-Remote-Code-Execution.html
Third Party AdvisoryVDB Entry
cwiki.apache.org / confluence/display/WW/S2-057
Issue TrackingThird Party Advisory
github.com / hook-s3c/CVE-2018-11776-Python-PoC
ExploitThird Party Advisory
lgtm.com / blog/apache_struts_CVE-2018-11776
ExploitThird Party Advisory
lists.apache.org / thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E
Mailing List
psirt.global.sonicwall.com / vuln-detail/SNWLID-2018-0012
Third Party Advisory
security.netapp.com / advisory/ntap-20180822-0001
Third Party Advisory
security.netapp.com / advisory/ntap-20181018-0002
Third Party Advisory
exploit-db.com / exploits/45260
ExploitThird Party AdvisoryVDB Entry
exploit-db.com / exploits/45262
ExploitThird Party AdvisoryVDB Entry
exploit-db.com / exploits/45367
ExploitThird Party AdvisoryVDB Entry
oracle.com / security-alerts/cpujul2020.html
Third Party Advisory
oracle.com / technetwork/security-advisory/cpujan2019-5072801.html
PatchThird Party Advisory
arubanetworks.com / assets/alert/ARUBA-PSA-2018-005.txt
Broken LinkMailing ListThird Party Advisory
oracle.com / technetwork/security-advisory/alert-cve-2018-11776-5072787.html
PatchThird Party Advisory
oracle.com / technetwork/security-advisory/cpuoct2018-4428296.html
PatchThird Party Advisory
securityfocus.com / bid/105125
Broken LinkThird Party AdvisoryVDB Entry
securitytracker.com / id/1041547
Broken LinkThird Party AdvisoryVDB Entry
securitytracker.com / id/1041888
Broken LinkThird Party AdvisoryVDB Entry