Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2026-45434

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-45434.

Coverage Span: 2026-05-20
Reports: 1 related reports

Associated Reports & Timeline

CVE-2026-45434 — Apache OFBiz LoginWorker checkLogin Password-Change Flow Authentication Bypass RCE

CVE-2026-45434: OFBiz's checkLogin misreads the requirePasswordChange flow as success, letting attackers bypass locked accounts and reach unsandboxed ProgramExport for OS command execution.