Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 07 Nov 2026 20:36:49 +0000 CVE-2026-114277 — Apache OFBiz: Janrain Engage Social Login Improperly Binds External Identities to Local Accounts https://db.gcve.eu/vuln/cve-2026-114277 <p><strong>Affected:</strong> Apache Software Foundation Apache OFBiz</p> <p>Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBiz. Apache OFBiz&#39;s optional Janrain Engage Social Login integration in the ecommerce component improperly binds authenticated external identities to local user accounts. This issue affects Apache OFBiz: before 24.09.08. Users are recommended to upgrade to version 24.09.08, which fixes the issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache OFBiz</p> <p>Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBiz. Apache OFBiz&#39;s optional Janrain Engage Social Login integration in the ecommerce component improperly binds authenticated external identities to local user accounts. This issue affects Apache OFBiz: before 24.09.08. Users are recommended to upgrade to version 24.09.08, which fixes the issue.</p> https://db.gcve.eu/vuln/cve-2026-114277