CVE-2026-29226

High

Published: 19/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The SSRF vulnerability in Apache OFBiz, occurring in Content component operations, allows an attacker to send malicious requests to the server. This issue affects versions of Apache OFBiz before 24.09.06.

Risk Assessment

The organization may be exposed to unauthorized access to internal resources and the potential to conduct attacks on other systems within the network.

Recommendation

It is recommended to upgrade to version 24.09.06, which fixes the issue.

Original NVD description (English source)

Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz via Content component operations. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue.