CVE-2016-4437

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

• Apache/Aurora

  cpe:2.3:a:apache:aurora:*:*:*:*:*:*:*:*

  Range: >=0.10.0,<0.18.1
• Apache/Shiro

  cpe:2.3:a:apache:shiro:*:*:*:*:*:*:*:*

  Range: <1.2.5
• Red Hat/Fuse

  cpe:2.3:a:redhat:fuse:1.0:*:*:*:*:*:*:*
• Red Hat/Jboss Middleware Text Only Advisories

  cpe:2.3:a:redhat:jboss_middleware_text-only_advisories:1.0:*:*:*:*:middleware:*:*
• ghsa-coords

  pkg:maven/org.apache.shiro/shiro-core

  Range: < 1.2.5

• packetstormsecurity.com/files/157497/Apache-Shiro-1.2.4-Remote-Code-Execution.htmlnvdExploitThird Party AdvisoryVDB EntryWEB
• packetstormsecurity.com/files/137310/Apache-Shiro-1.2.4-Information-Disclosure.htmlnvdThird Party AdvisoryVDB EntryWEB
• rhn.redhat.com/errata/RHSA-2016-2035.htmlnvdThird Party AdvisoryWEB
• rhn.redhat.com/errata/RHSA-2016-2036.htmlnvdThird Party AdvisoryWEB
• www.securityfocus.com/archive/1/538570/100/0/threadednvdBroken LinkThird Party AdvisoryVDB EntryWEB
• www.securityfocus.com/bid/91024nvdBroken LinkThird Party AdvisoryVDB EntryWEB
• github.com/advisories/GHSA-p836-389h-j692ghsaADVISORY
• nvd.nist.gov/vuln/detail/CVE-2016-4437ghsaADVISORY
• lists.apache.org/thread.html/ef3a800c7d727a00e04b78e2f06c5cd8960f09ca28c9b69d94c3c4c4%40%3Cannouncements.aurora.apache.org%3EnvdMailing ListWEB
• lists.apache.org/thread.html/ef3a800c7d727a00e04b78e2f06c5cd8960f09ca28c9b69d94c3c4c4@%3Cannouncements.aurora.apache.org%3EghsaWEB
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government ResourceWEB

• New SharkLoader Malware Deploys Cobalt Strike in StrikeShark Cyberattacks
  The Hacker News · Jun 26, 2026
• StrikeShark: investigating a new campaign delivering Cobalt Strike through SharkLoader
  Securelist · Jun 24, 2026