CVE-2026-85627 | Apache OFBiz up to 24.09.7 Template Engine special elements in template engine

A vulnerability marked as critical has been reported in Apache OFBiz up to 24.09.7. The impacted element is an unknown function of the component Template Engine. This manipulation causes improper neutralization of special elements used in a template engine.

The identification of this vulnerability is CVE-2026-85627. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More