CVE-2026-81815 | Apache OFBiz up to 24.09.7 Entity Engine SqlJdbcUtil.addValueSingle _ic sql injection

November 5, 2026 Yanac

A vulnerability labeled as critical has been found in Apache OFBiz up to 24.09.7. This impacts the function SqlJdbcUtil.addValueSingle of the component Entity Engine. Such manipulation of the argument _ic leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-81815. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More