CVE-2026-31388
published 2026-05-19CVE-2026-31388: Improper Access Control vulnerability in Apache OFBiz in multi-tenant deployments. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to…
PriorityP429medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EPSS
0.42%
33.6th percentile
Improper Access Control vulnerability in Apache OFBiz in multi-tenant deployments.
This issue affects Apache OFBiz: before 24.09.06.
Users are recommended to upgrade to version 24.09.06, which fixes the issue.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | ofbiz | < 24.09.06 | 24.09.06 |
| apache_software_foundation | apache_ofbiz | < 24.09.06 | 24.09.06 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Apache OFBiz up to 24.09.05 access control
vuldb·2026-05-23·CVSS 5.3
CVE-2026-31388 [MEDIUM] Apache OFBiz up to 24.09.05 access control
A vulnerability classified as critical was found in Apache OFBiz up to 24.09.05. The impacted element is an unknown function. The manipulation results in improper access controls.
This vulnerability is reported as CVE-2026-31388. The attacker must have access to the local network to execute the attack. No exploit exists.
Upgrading the affected component is advised.
GHSA
GHSA-48vq-7h22-vf29: Improper Access Control vulnerability in Apache OFBiz in multi-tenant deployments
ghsa_unreviewed·2026-05-19
CVE-2026-31388 [MEDIUM] CWE-284 GHSA-48vq-7h22-vf29: Improper Access Control vulnerability in Apache OFBiz in multi-tenant deployments
Improper Access Control vulnerability in Apache OFBiz in multi-tenant deployments.
This issue affects Apache OFBiz: before 24.09.06.
Users are recommended to upgrade to version 24.09.06, which fixes the issue.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-05-19
Published