EUVD-2026-36167

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache OFBiz allows a low-privileged authenticated user with Content/DataResource editing privileges to perform template injection attacks that could lead to Remote Code Execution. This issue affects Apache OFBiz: before...

CVE-2026-50223

Apache OFBiz versions prior to 24.09.07 are vulnerable to an Improper Control of Generation of Code (Code Injection) vulnerability. A low-privileged authenticated user with Content/DataResource editing privileges can perform template injection attacks , which may lead to Remote Code Execution (RC...