CVE-2026-81815

Vendor

Apache Software Foundation

Product

Apache OFBiz

Weakness

CWE-89

Exposure class

Database, Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 31
   CVE NVD 2h ago

   SQL Injection in the entity engine's generic performFind service in Apache OFBiz 24.09 before 24.09.08 on MySQL/MariaDB-backed deployments allows a…

   SQL Injection in the entity engine's generic performFind service in Apache OFBiz 24.09 before 24.09.08 on MySQL/MariaDB-backed deployments allows a remote unauthenticated attacker to disclose arbitrary rows from the queried…

   Fix available CVE-2026-81815 Apache Software Foundation