CVE-2026-76150 | Apache OFBiz up to 24.09.07 Image Replacement Service replaceImageToExistImage path traversal

SecurityVulns
Yanac

A vulnerability, which was classified as critical, was found in Apache OFBiz up to 24.09.07. This issue affects the function replaceImageToExistImage of the component Image Replacement Service. Such manipulation of the argument productId/dataResourceNameExist/dataResourceNameReplace leads to path traversal.

This vulnerability is listed as CVE-2026-76150. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More