UpHeron
All vulnerabilities

Servers and applications

CVE-2026-84728

Apache OFBiz: Cross-tenant authorization bypass in mapped-domain login

Severity
Medium 5.4
Published
5 Nov 2026
Last changed
5 Nov 2026
Added to UpHeron
5 Nov 2026
Fixed in
24.09.08
Sources
CVE Program

Affected software

SoftwareAffected versions
Apache OFBizServers and applications · cna:apache software foundation|apache ofbiz
  • Every version before 24.09.08

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-84728