Related Threat Clusters

Critical Vulnerabilities Discovered in Apache OFBiz Affecting All Versions Pre-24.09.06
Apache OFBiz has critical vulnerabilities that allow attackers to exploit hardcoded keys and bypass authentication. The vulnerabilities, CVE-2026-31986 and CVE-2026-45434, were published on 2026-05-19 and affect all…

3 articles · Updated May 21, 2026
Critical Remote Code Execution Flaws in Enterprise Java Platforms Uncovered
Research presented at Black Hat 2026 revealed 12 vulnerabilities in major Enterprise Java platforms, including serious remote code execution (RCE) chains affecting Bonita BPM and Apache OFBiz. These vulnerabilities…

3 articles · Updated August 7, 2026
Remote Code Execution Vulnerabilities in Apache ActiveMQ and OFBiz Detected
On June 1 and 2, 2026, Snort published alerts for remote code execution attempts targeting Apache ActiveMQ and Apache OFBiz. The ActiveMQ vulnerability involves insecure deserialization, allowing attackers to execute…

6 articles · Updated June 2, 2026

Recent Intelligence Reports

Enterprise Java Vulnerabilities Enable Pre — Gbhackers · August 7, 2026
Multiple Flaws in Enterprise Java Platforms Allow Attackers to Execute Remote Code — Cybersecuritynews · August 7, 2026
Rule Docs 1:64685 — Snort · June 1, 2026
Researchers at Aretiq AI discovered — aretiq.ai · May 21, 2026
Apache OFBiz RCE Flaw Abuses Password — Gbhackers · May 21, 2026
Apache OFBiz RCE Flaw Abuses Password — Gbhackers · May 21, 2026
Security update: Hardcoded key allows access to Apache OFBiz — Heise.De · May 20, 2026