CVE-2026-81816 | Apache OFBiz up to 24.09.7 ContentWorker renderContentAsText xml external entity reference

A vulnerability classified as critical was found in Apache OFBiz up to 24.09.7. Impacted is the function renderContentAsText of the component ContentWorker. Such manipulation leads to xml external entity reference.

This vulnerability is referenced as CVE-2026-81816. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More