CVE-2026-97356 | Apache OFBiz up to 24.09.07 ViewFile fileName path traversal

November 5, 2026 Yanac

A vulnerability identified as critical has been detected in Apache OFBiz up to 24.09.07. Impacted is an unknown function of the component ViewFile. The manipulation of the argument fileName leads to path traversal.

This vulnerability is uniquely identified as CVE-2026-97356. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More