Exploit for S2-055 CVE-2017-7525

Deserialization vulnerability in Apache Struts 2 (S2-055, CVE-2017-7525) enabling RCE.

Published 5 Oct 2026Updated 5 Oct 202693 sources
CVSS 9.8 PoC CANDIDATE

Record history

Record created from the first normalized source observation.
Metadata and source references refreshed.