Tag
#file inclusion
Apache OFBiz Pre-Auth RCE Fixed in 24.09.08 (CVE-2026-68524)
Apache OFBiz before 24.09.08 loads a screen definition from an attacker-chosen file descriptor on the login page and runs code; 46 CVEs are fixed.
Nov 05, 2026