CVE-2026-74841

Vendor

Apache Software Foundation

Product

Apache OFBiz

Weakness

CWE-400, CWE-770

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 20
   CVE NVD 2h ago

   In multitenant deployments, ContextFilter and LoginWorker built a per-tenant delegator name from a request-supplied userTenantId parameter and…

   In multitenant deployments, ContextFilter and LoginWorker built a per-tenant delegator name from a request-supplied userTenantId parameter and requested a delegator for it before confirming the tenant existed. DelegatorFactory's…

   CVE-2026-74841 Apache Software Foundation