CVE-2026-73580 | Apache OFBiz up to 24.09.07 getHRChild service partyId improper authorization

A vulnerability classified as problematic was found in Apache OFBiz up to 24.09.07. This affects an unknown part of the component getHRChild service. The manipulation of the argument partyId results in improper authorization.

This vulnerability is identified as CVE-2026-73580. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More