Attackers can exploit vulnerabilities in Apache OFBiz to compromise PCs. In a recent version, developers have now closed several security vulnerabilities.
OFBiz can be used to organize and automate complex business processes. From the security section of the Apache OFBiz website, it is evident that developers have closed a total of 17 vulnerabilities in version 24.09.06 . So far, there are no indications of attacks.
A “ critical ” vulnerability (CVE-2026-31986) is considered particularly dangerous. At this point, attackers can access instances due to a hardcoded cryptographic key. However, attackers can also execute malicious code remotely (e.g., CVE-2026-45434 “ high ”).
To protect systems from possible attacks, administrators must install the repaired version promptly.
This article was originally published in German . It was translated with technical assistance and editorially reviewed before publication.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
