CVE-2026-83542 | Apache OFBiz up to 24.09.7 Screen Descriptor Mechanism editPortalPageColumnWidth code injection

A vulnerability has been found in Apache OFBiz up to 24.09.7 and classified as critical. This affects an unknown part of the file /sfa/control/editPortalPageColumnWidth of the component Screen Descriptor Mechanism. This manipulation causes code injection.

This vulnerability is registered as CVE-2026-83542. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More