CVE-2026-83542 - Apache OFBiz: Unauthenticated RCE via login-page widget injection
CVE ID :CVE-2026-83542 Published : Nov. 5, 2026, 2:17 p.m. | 2 hours, 51 minutes ago Description :Improper Control of Generation of Code ('Code Injection') in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to execute arbitrary code on the server...