CVE-2026-46586

High

Published: 19/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Apache OFBiz has a vulnerability related to improper control of code generation and improper neutralization of directives in dynamically evaluated code. This issue affects versions before 24.09.06.

Risk Assessment

This vulnerability may lead to Code Injection attacks, posing a serious threat to the security of the application and user data.

Recommendation

It is recommended to upgrade to version 24.09.06, which fixes the issue.

Original NVD description (English source)

Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue.