CVE coverage
View on NVD →
CVE-2026-45434
CVSS 9.8
2 detections found
Improper Authentication vulnerability in Apache OFBiz via Password-Change Logic Flaw Leading to Remote Code Execution
This issue affects Apache OFBiz: before 24.09.06.
Users are recommended to upgrade to version 24.09.06, which fixes the issue.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| suricata | ET WEB_SPECIFIC_APPS [aretiq.ai] Apache OFBiz requirePasswordChange Authentication Bypass Attempt | rev 1 | 2026-06-30 |
| snort | ET WEB_SPECIFIC_APPS [aretiq.ai] Apache OFBiz requirePasswordChange Authentication Bypass Attempt | rev 1 | 2026-06-30 |