CVE-2026-105330

Use of Hard-coded Cryptographic Key in JWT token authentication in Apache OFBiz 24.09.06 and 24.09.07 on all platforms allows an unauthenticated, network-reachable attacker to obtain full administrative access via a forged JWT signed with the factory-default security.token.key value that CVE-2026-31986 removed from newly generated configurations, on a deployment that upgraded from a release predating that fix while retaining its existing security.properties with security.internal.sso.enabled set to true. Users are recommended to upgrade to version 24.09.08. Upgrading alone does not replace an already-configured key: deployments that carried framework/security/config/security.properties forward from a release predating the CVE-2026-31986 fix must also run './gradlew rotateSecretKeys' after upgrading, since the existing generateSecretKeys task leaves an already-set value untouched.

• CWE-321

• https://lists.apache.org/thread.html/7b2syzksp7klt9fvhdg0olldvs2g83lz

Published

Nov 5, 2026

Last Modified

Nov 5, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-105323Improper neutralization of input during web page generation …6.1
• CVE-2026-105324An HTTP header injection vulnerability in start-page-loader.…9.2
• CVE-2026-105325Missing check for  ACCOUNTING_UPDATE /  ACCOUNTING_CREATE in…
• CVE-2026-105326An argument injection flaw was found in CUPS. When email not…2.5
• CVE-2026-105329A vulnerability was determined in TallCMS up to 4.8.0. This …6.3
• CVE-2026-10533A flaw was found in OpenShift Container Platform. Completed …5
• CVE-2026-105331Local privilege escalation in Checkmk 2.5.0 before 2.5.0p10 …5.2
• CVE-2026-10534IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is …9.8
• CVE-2026-10535IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is …7.8
• CVE-2026-10536A use-after-free vulnerability exists in libcurl when an app…9.8
• CVE-2026-10537A misconfiguration issue in the affected service in Control-…5.3
• CVE-2026-10538Messaging consumer functionality allows deserialization of u…8.9