CVE-2026-74841

In Apache OFBiz multitenant deployments, an unauthenticated attacker can cause a Denial of Service by exploiting a vulnerability in the ContextFilter and LoginWorker . The system constructs a per-tenant delegator name from a request-supplied userTenantId parameter and requests a delegator before ...