CVE-2026-92887 | Apache OFBiz up to 24.09.07 Definition Parser .rest.xml ModelApiReader auth improper authentication

A vulnerability was found in Apache OFBiz up to 24.09.07. It has been classified as critical. Affected by this issue is the function ModelApiReader of the file .rest.xml of the component Definition Parser. This manipulation of the argument auth causes improper authentication.

This vulnerability appears as CVE-2026-92887. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More