Exploit for S2-055 CVE-2017-7525

Deserialization vulnerability in Apache Struts 2 (S2-055, CVE-2017-7525) enabling RCE.

Published 5 Oct 2026Updated 5 Oct 202693 sources
CVSS 9.8 PoC CANDIDATE

Source timeline

Discovered through SploitusView source ↗