CyberRota
Back to database

CVE-2026-45434

CRITICAL · CVSS 9.8 EPSS 1.24% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-05-19 · Last synced: 2026-06-17

CyberRota Analysis

Uzaktan istismar edilebilir olabilir.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
remote code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-45434
Severity
CRITICAL
CVSS
9.8
EPSS
1.24%
Apache

Original NVD Description

Improper Authentication vulnerability in Apache OFBiz via Password-Change Logic Flaw Leading to Remote Code Execution This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue.