CVE-2026-31909

High

Published: 19/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The CVE-2026-31909 vulnerability in Apache OFBiz involves exposure of sensitive information to unauthorized actors. This issue affects versions before 24.09.06.

Risk Assessment

The exposure of sensitive data may lead to privacy breaches for users and potential financial losses for the organization.

Recommendation

It is recommended to upgrade to version 24.09.06, which fixes the issue.

Original NVD description (English source)

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue.