CVE-2026-104714

Summary

This flaw involves a race condition in Apache Struts where concurrent execution using shared resources without proper synchronization can lead to localized message formatting issues, potentially exposing user data or causing server errors.

Exploitability

Exploitation requires concurrent access to the affected feature, making it moderately difficult. Precondition is the presence of concurrent requests using shared resources.

Blast radius

If exploited, this could lead to data exposure or server errors affecting multiple users, impacting application integrity and user trust.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Apache Struts version 6.12.0 or 7.4.0, which address the issue.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.