CVE-2026-74841 | Apache OFBiz up to 24.09.7 DelegatorFactory userTenantId allocation of resources

November 5, 2026 Yanac

A vulnerability labeled as problematic has been found in Apache OFBiz up to 24.09.7. Affected by this issue is some unknown functionality of the component DelegatorFactory. Executing a manipulation of the argument userTenantId can lead to allocation of resources.

This vulnerability is handled as CVE-2026-74841. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More