CVE-2026-73578 | Apache OFBiz up to 24.09.7 View Rendering RequestHandler.renderView _LAST_VIEW_NAME_ improper authorization

A vulnerability, which was classified as critical, has been found in Apache OFBiz up to 24.09.7. This vulnerability affects the function RequestHandler.renderView of the component View Rendering. This manipulation of the argument _LAST_VIEW_NAME_ causes improper authorization.

This vulnerability is tracked as CVE-2026-73578. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More