Skip to content

CVE record · 1 source

CVE-2026-114277

Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBiz.

Vendor: Apache Software Foundation
Product: Apache OFBiz
Weakness: CWE-302
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

25

CVE NVD 1h ago

Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBiz.

Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBiz. Apache OFBiz's optional Janrain Engage Social Login integration in the ecommerce component improperly binds authenticated external identities to local…

Fix available CVE-2026-114277 Apache Software Foundation