CVE-2026-68524
— UNSCOREDPublished 2026-11-05 · Updated 2026-11-05
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
An unauthenticated attacker can exploit temporary-file handling, access an open file descriptor, and inject a "file:" URI to cause OFBiz to load an attacker-controlled Screen definition. This issue affects Apache OFBiz: before 24.09.08. Users are recommended to upgrade to version 24.09.08, which fixes the issue.
Weaknesses
CWE-94
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2021-48016PoC
- CRITICALCVE-2024-31026
- HIGHCVE-2024-42002PoC
- LOWCVE-2024-4412PoC
- UNSCOREDCVE-2025-30045
- UNSCOREDCVE-2025-30050
- HIGHCVE-2025-45528PoC
- HIGHCVE-2026-0322
Related by shared AI tags and CWE weakness class. Browse the full archive.