CVE-2026-45434 – Apache OFBiz
CVSS 9.8
CRITICAL
“Authentication weaknesses in enterprise platforms can give attackers the keys to critical business systems.”
Apache Software Foundation released a patch for a critical vulnerability affecting Apache OFBiz. CVE-2026-45434 has a CVSS score of 9.8, which is Critical severity.
The vulnerability is tied to improper authentication handling and could allow attackers to gain elevated privileges within affected OFBiz environments. The update strengthens authentication controls and reduces the risk of unauthorized administrative access across exposed enterprise deployments.
Key Details
- Affected Product
- Apache Ofbiz
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- CWE Classification
- CWE-287
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.