CVE-2026-73577 | Apache OFBiz up to 24.09.7 RequestHandler improper authorization

November 5, 2026 Yanac

A vulnerability described as critical has been identified in Apache OFBiz up to 24.09.7. This vulnerability affects unknown code of the component RequestHandler. The manipulation results in improper authorization.

This vulnerability was named CVE-2026-73577. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More