Vendor
Apache: actively exploited vulnerabilities
41 vulnerabilities in Apache products are listed in CISA’s catalog of actively exploited vulnerabilities, 8 of them used by ransomware. Latest addition on October 8, 2026: CVE-2016-3081 (Struts).
- 41 exploited vulnerabilities in the catalog
- 3 added in the last 12 months
- 8 used by ransomware
- 21 products affected
Affected products
- Struts6
- Tomcat6
- HTTP Server4
- ActiveMQ3
- OFBiz3
- Log4j22
- Solr2
- Struts 12
- Airflow1
- Airflow's Experimental API1
- Apache1
- APISIX1
- CouchDB1
- Flink1
- HugeGraph-Server1
- Kylin1
- RocketMQ1
- Shiro1
- Spark1
- Struts 21
- Superset1
CERT-FR alerts and notices
Recent CERT-FR publications naming this vendor (alerts: immediate threat; notices: patches released). In French.
-
CERTFR-2026-AVI-1290Multiples vulnérabilités dans Apache Struts (09 octobre 2026)
All exploited vulnerabilities
CISA KEV catalog, newest first: each entry corresponds to observed exploitation.
2026 3 vulnerabilities
-
CVE-2016-3081Apache Struts Command Injection Vulnerability
-
CVE-2026-34486Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
-
CVE-2026-34197Apache ActiveMQ Improper Input Validation Vulnerability
2025 3 vulnerabilities
-
CVE-2024-38475Apache HTTP Server Improper Escaping of Output Vulnerability
-
CVE-2025-24813Apache Tomcat Path Equivalence Vulnerability
-
CVE-2024-45195Apache OFBiz Forced Browsing Vulnerability
2024 5 vulnerabilities
-
CVE-2024-27348Apache HugeGraph-Server Improper Access Control Vulnerability
-
CVE-2024-38856Apache OFBiz Incorrect Authorization Vulnerability
-
CVE-2024-32113Apache OFBiz Path Traversal Vulnerability
-
CVE-2020-17519Apache Flink Improper Access Control Vulnerability
-
CVE-2023-27524Apache Superset Insecure Default Initialization of Resource Vulnerability
2023 5 vulnerabilities
-
CVE-2023-46604Used by ransomwareApache ActiveMQ Deserialization of Untrusted Data Vulnerability
-
CVE-2023-33246Apache RocketMQ Command Execution Vulnerability
-
CVE-2016-8735Apache Tomcat Remote Code Execution Vulnerability
-
CVE-2021-45046Used by ransomwareApache Log4j2 Deserialization of Untrusted Data Vulnerability
-
CVE-2022-33891Apache Spark Command Injection Vulnerability
2022 13 vulnerabilities
-
CVE-2022-24706Apache CouchDB Insecure Default Initialization of Resource Vulnerability
-
CVE-2022-24112Apache APISIX Authentication Bypass Vulnerability
-
CVE-2020-1956Apache Kylin OS Command Injection Vulnerability
-
CVE-2017-12617Apache Tomcat Remote Code Execution Vulnerability
-
CVE-2017-12615Used by ransomwareApache Tomcat on Windows Remote Code Execution Vulnerability
-
CVE-2013-2251Apache Struts Improper Input Validation Vulnerability
-
CVE-2020-1938Apache Tomcat Improper Privilege Management Vulnerability
-
CVE-2017-9791Apache Struts 1 Improper Input Validation Vulnerability
-
CVE-2016-3088Apache ActiveMQ Improper Input Validation Vulnerability
-
CVE-2012-0391Apache Struts 2 Improper Input Validation Vulnerability
-
CVE-2006-1547Apache Struts 1 ActionForm Denial-of-Service Vulnerability
-
CVE-2020-13927Apache Airflow's Experimental API Authentication Bypass
-
CVE-2020-11978Apache Airflow Command Injection
2021 12 vulnerabilities
-
CVE-2021-44228Used by ransomwareApache Log4j2 Remote Code Execution Vulnerability
-
CVE-2019-0193Apache Solr DataImportHandler Code Injection Vulnerability
-
CVE-2021-40438Used by ransomwareApache HTTP Server-Side Request Forgery (SSRF)
-
CVE-2021-42013Used by ransomwareApache HTTP Server Path Traversal Vulnerability
-
CVE-2021-41773Used by ransomwareApache HTTP Server Path Traversal Vulnerability
-
CVE-2020-17530Apache Struts Remote Code Execution Vulnerability
-
CVE-2019-17558Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability
-
CVE-2019-0211Apache HTTP Server Privilege Escalation Vulnerability
-
CVE-2018-11776Apache Struts Remote Code Execution Vulnerability
-
CVE-2017-9805Apache Struts Deserialization of Untrusted Data Vulnerability
-
CVE-2017-5638Used by ransomwareApache Struts Remote Code Execution Vulnerability
-
CVE-2016-4437Apache Shiro Code Execution Vulnerability
What to do
If your estate includes any of these products, make sure the vendor’s patches are applied, starting with the most recent vulnerabilities and those used by ransomware, then look for signs of compromise: an exploited vulnerability has often been used before it was fixed.
Additions from all vendors are tracked on the Actively exploited vulnerabilities page, updated several times a day. Sources: CISA KEV catalog (US public domain) and CERT-FR.