Do Son 46 Apache OFBiz vulnerabilities, including pre-auth RCE CVE-2026-68524 and CVE-2026-83542, are fixed in OFBiz 24.09.08. Upgrade now.
Apache OFBiz
Apache OFBiz releases version 24.09.06 to patch severe RCE flaws, token forgery, and a critical password-reset authentication bypass. Upgrade now!
Apache patched a Critical RCE flaw (CVE-2025-59118) in OFBiz ERP that allows remote attackers to upload arbitrary files with dangerous types. A reflected XSS flaw was also fixed.
Learn about CVE-2025-26865, a vulnerability in Apache OFBiz that allows arbitrary code execution on vulnerable servers.
Urgent security updates for Apache OFBiz: Learn about the critical vulnerabilities (CVE-2024-47208 and CVE-2024-48962) and how they can compromise your business.
Discover the impact of CVE-2024-45195 in Apache OFBiz, a serious security flaw that enables attackers to exploit vulnerable systems and execute malicious code.
PoC exploit code for critical Apache OFBiz vulnerability (CVE-2024-38856). Learn how this RCE flaw poses a severe threat to affected systems
Urgent security advisory: Apache OFBiz vulnerability (CVE-2024-38856) exposes ERP systems to unauthorized code execution.
Learn about the active exploitation of the Apache OFBiz vulnerability, its potential impact, and how to mitigate the risks.
CVE-2024-36104 could allow remote attackers to execute arbitrary code on affected systems, potentially leading to full system compromise
A serious vulnerability (CVE-2024-32113) has been uncovered in Apache OFBiz, a popular suite of enterprise software tools
Two critical vulnerabilities (CVE-2024-25065, CVE-2024-23946) have been discovered that put a wide range of businesses at risk
CVE-2023-51467 enables pre-authentication RCE, allowing attackers to bypass authentication mechanisms and directly perform SSRF attacks
By exploiting the CVE-2023-49070 vulnerability, an attacker can execute arbitrary code on the affected Apache OFBiz server
CVE-2022-25371, Apache OFBiz could allow a remote attacker to traverse directories on the system, caused by a flaw in the Birt viewer