Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-19 | 1 | Disclosure1 |
| 2026-05-21 | 2 | Patch2 |
Apache OFBiz Fixes CVE-2026-46586 Groovy Code Execution Vulnerability https://thecybrdef.com/apache-ofbiz-fixes-cve-2026-46586-groovy-code-execution-vulnerability/ #Cyberupdates #Cybertechnews #Cybersecurity
Post summary
The article announces that Apache OFBiz has released a fix for CVE-2026-46586, a Groovy code execution vulnerability, but does not mention any PoC, exploit tool, or evidence of active exploitation.
Apache OFBiz Fixes CVE-2026-46586 Groovy Code Execution Vulnerability https://thecybrdef.com/apache-ofbiz-fixes-cve-2026-46586-groovy-code-execution-vulnerability/ #Cyberupdates #Cybertechnews #Cybersecurity
Post summary
Apache OFBiz has released a patch for CVE-2026-46586, a Groovy code execution vulnerability, with no mention of exploit code or active attacks.
CVE-2026-46586 Code Injection and Eval Injection Vulnerability in Apache OFBiz B... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-46586 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The tweet announces a code and eval injection vulnerability in Apache OFBiz, but provides no PoC, exploit code, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | apache | ofbiz | - | - | - |