Posted by Jacopo Cappellato on Nov 04 Multiple security vulnerabilities have been identified in Apache OFBiz, including some critical issues. Affected versions: All versions prior to 24.09.08. Mitigation: Users are advised to upgrade to Apache OFBiz 24.09.08, which addresses these vulnerabilities.
Apache OFBiz: CVE Announcements
About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/516
Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
OpenAI debuts GPT-6 Cyber, touting better performance — and safety guardrails
OpenAI announced a new cybersecurity-focused model Thursday, citing internal benchmark testing that shows improvements in vulnerability discovery, patch development and…
CVE-2026-109518: RCE in apt(1) (DSA 6607-1)
Posted by Jan Schaumann on Nov 04 This Debian Security Advisory for CVE-2026-109518 in apt(1) seems worth sharing more widely…
CVE-2026-90624: Apache OpenOffice: PDF File Parsing Heap based Buffer-Overflow-Remote Code Execution Vulnerability
Posted by Arrigo Marchiori on Nov 03 Severity: important Affected versions: - Apache OpenOffice through 4.1.16 Description: An unchecked memory access in the PDF import…
OpenVox Server RCE and client impersonation vulnerabilities
Posted by Ben Ford on Nov 03 Hello from the OpenVox project. We released updates to mitigate two 9+ CVE vulnerabilities that affect all known OpenVox and Puppet versions…
CVE-2026-113687: Apache Syncope: RCE via ProcessGroovyMethodsSandbox bypass
Posted by Francesco Chicchiriccò on Nov 02 Severity: important Affected versions: - Apache Syncope 3.0.0-M0 through 3.0.16 - Apache Syncope 4.0.0-M0 through 4.0.8 -…
CVE-2026-109083: Apache Syncope: Remote Code Execution via Flowable JUEL expression
Posted by Francesco Chicchiriccò on Nov 02 Severity: moderate Affected versions: - Apache Syncope 3.0.0-M0 through 3.0.16 - Apache Syncope 4.0.0-M0 through 4.0.8 -…