CVE-2026-84728 | Apache OFBiz up to 24.09.07 Multitenancy userTenantId improper authorization

A vulnerability was found in Apache OFBiz up to 24.09.07. It has been rated as critical. This vulnerability affects unknown code of the component Multitenancy. Performing a manipulation of the argument userTenantId results in improper authorization.

This vulnerability is known as CVE-2026-84728. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More