Severity: important Affected versions:
- Apache OFBiz before 24.09.06 Description: Improper Authentication vulnerability in Apache OFBiz via Password-Change Logic Flaw Leading to Remote Code Execution This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue. Credit: Mike Cole (reporter) References: https://ofbiz.apache.org/ https://www.cve.org/CVERecord?id=CVE-2026-45434
