CVE-2026-41919
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
19/05/2026
Last modified:
19/05/2026
Description
Improper Neutralization of Special Elements used in an LDAP Query (&#39;LDAP Injection&#39;) vulnerability in Apache OFBiz.<br />
<br />
This issue affects Apache OFBiz: before 24.09.06.<br />
<br />
Users are recommended to upgrade to version 24.09.06, which fixes the issue.