Lucene search
+L

6 matches found

OSV
OSV
added 2026/05/19 9:34 a.m.22 views

CVE-2026-31986 Apache OFBiz: Unauthenticated RCE via Default JWT Signing Key and Widget Template Injection

Use of Hard-coded Cryptographic Key vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue...

9.1CVSS5.9AI score
SaveExploits0References4
Rows per page
Query Builder