{
  "id": "CVE-2016-3081",
  "vendor_project": "Apache",
  "product": "Struts",
  "description": "Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Method Invocation is enabled.",
  "kev_date_added": "2026-10-08",
  "cvss": 9.0,
  "severity": "High",
  "advisories": [],
  "cited_in_cases": [],
  "indictment_cited": false
}