CVE-2026-82960 | Apache OFBiz up to 24.09.07 ModelFormField GroovyUtil.eval caContentIdTo code injection

November 5, 2026 Yanac

A vulnerability was found in Apache OFBiz up to 24.09.07 and classified as critical. This vulnerability affects the function GroovyUtil.eval of the component ModelFormField. Such manipulation of the argument caContentIdTo leads to code injection.

This vulnerability is documented as CVE-2026-82960. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More