Skip to content

#ofbiz

1 article

Security Alerts Nov 5, 2026

CVE-2026-83542 and CVE-2026-82907: RCE and Authentication Bypass in Apache OFBiz

Two critical vulnerabilities in Apache OFBiz 24.09 before 24.09.08: Groovy code injection enables unauthenticated remote code execution, and a captured externalLoginKey yields a persistent victim session...