← All advisories

Unrated severityNVD Advisory· Published Nov 5, 2026

CVE-2026-66903

CVE-2026-66903

Description

Authenticated Path Traversal in Catalog Image Management allows writing image files outside the intended directory in Apache OFBiz.

This issue affects Apache OFBiz: before 24.09.08.

Users are recommended to upgrade to version 24.09.08, which fixes the issue.

Affected products

1

Apache/Ofbizllm-fuzzy
Range: <24.09.08

Patches

Vulnerability mechanics

References

1

lists.apache.org/thread.html/7b2syzksp7klt9fvhdg0olldvs2g83lznvd

News mentions

0

No linked articles in our index yet.

CVE-2026-66903 · VYPR