Topic

Java Security: news, advisories and analysis

4 articlesUpdated 13 Oct 2026

CyberSecureToday covers Java Security across 4 articles published between 16 Sep 2026 and 13 Oct 2026. The coverage includes 4 vulnerability advisories. 4 advisories are rated critical or high severity, and 3 involve flaws listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Java Security most often intersect with Remote Code Execution, Active Exploitation and Apache Struts, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Apache Struts 2 Dynamic Method Invocation Flaw Weaponized for Remote Code Execution”, was published 13 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSCritical
Apache Struts 2 Dynamic Method Invocation Flaw Weaponized for Remote Code Execution
Apache Struts resolves critical vulnerability S2-032 (CVE-2016-3081) where dynamic method invocation enables arbitrary remote command execution via OGNL payloads.
CST Editorial Desk13 Oct 20269 min read
ThreatsCloud & SaaSHigh
Amazon OpenSearch SQL Plugin Cursor Deserialization Flaw Enables Remote Code Execution CVE-2026-83497
AWS and OpenSearch release bulletin 2026-092-AWS for high-severity flaw CVE-2026-83497 in the SQL plugin allowing authenticated users to execute code via cursors.
CST Editorial Desk23 Sep 202616 min read
ThreatsCloud & SaaSCritical
Adobe ColdFusion Critical Path Traversal Flaw CVE-2026-48282 Exploited in Active Attacks
CISA incorporates Adobe ColdFusion path traversal vulnerability CVE-2026-48282 (CVSS 9.8) into KEV catalog following active exploitation against enterprise application servers.
Mei-Lin Chen17 Sep 202614 min read
ThreatsCloud & SaaSHigh
Apache Tomcat Session Data Exposure Flaw Weaponized in Credential Hijacking Attacks
CISA flags Apache Tomcat vulnerability CVE-2026-34486 exploited in enterprise intrusions to intercept unencrypted session tokens and hijack authenticated user access.
Daniel Okafor16 Sep 202610 min read

Latest coverage

Apache Struts 2 Dynamic Method Invocation Flaw Weaponized for Remote Code Execution

Amazon OpenSearch SQL Plugin Cursor Deserialization Flaw Enables Remote Code Execution CVE-2026-83497

Adobe ColdFusion Critical Path Traversal Flaw CVE-2026-48282 Exploited in Active Attacks

Apache Tomcat Session Data Exposure Flaw Weaponized in Credential Hijacking Attacks