CVE-2026-81808 | Apache OFBiz up to 24.09.7 ProductSearchEvents improper authorization

November 5, 2026 Yanac

A vulnerability described as critical has been identified in Apache OFBiz up to 24.09.7. Affected by this vulnerability is an unknown functionality of the component ProductSearchEvents. Executing a manipulation can lead to improper authorization.

The identification of this vulnerability is CVE-2026-81808. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More