CVE-2026-81744 | Apache OFBiz up to 24.09.7 ContentPermissionServices createContentRole privileges management

November 5, 2026 Yanac

A vulnerability marked as critical has been reported in Apache OFBiz up to 24.09.7. Affected is the function createContentRole of the component ContentPermissionServices. Performing a manipulation results in improper privilege management.

This vulnerability was named CVE-2026-81744. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More