CVE-2026-85627

Vendor

Apache Software Foundation

Product

Apache OFBiz

Weakness

CWE-425, CWE-1336

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 25
   CVE NVD 1h ago

   Improper Neutralization of Special Elements Used in a Template Engine ('Server-Side Template Injection') in Apache OFBiz 24.09 before 24.09.08 on all…

   Improper Neutralization of Special Elements Used in a Template Engine ('Server-Side Template Injection') in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated attacker holding only a stock…

   Fix available CVE-2026-85627 Apache Software Foundation