CVE-2026-84183 | Apache OFBiz up to 24.09.7 LayoutEvents LayoutEvents.xml updateLayout improper authorization

A vulnerability identified as critical has been detected in Apache OFBiz up to 24.09.7. This affects the function updateLayout of the file applications/content/minilang/layout/LayoutEvents.xml of the component LayoutEvents. This manipulation causes improper authorization.

This vulnerability is handled as CVE-2026-84183. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More