CVE-2026-81734 | Apache OFBiz up to 24.09.7 ProductEvents updateProductQuickAdminShipping privileges management

A vulnerability was found in Apache OFBiz up to 24.09.7 and classified as problematic. The affected element is the function updateProductQuickAdminShipping of the component ProductEvents. Executing a manipulation can lead to improper privilege management.

This vulnerability is registered as CVE-2026-81734. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More