CVE-2026-71901 | Apache OFBiz up to 24.09.7 sfa resource injection

A vulnerability has been found in Apache OFBiz up to 24.09.7 and classified as critical. Impacted is an unknown function of the component sfa. Performing a manipulation results in improper control of resource identifiers.

This vulnerability is cataloged as CVE-2026-71901. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More