CVE-2026-82907 | Apache OFBiz up to 24.09.7 ExternalLoginKeysManager checkExternalLoginKey improper authentication

A vulnerability was found in Apache OFBiz up to 24.09.7. It has been rated as critical. The affected element is the function checkExternalLoginKey of the component ExternalLoginKeysManager. The manipulation leads to improper authentication.

This vulnerability is traded as CVE-2026-82907. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More