Critical
CVE-2026-31986
Pre-auth RCE vulnerabilities in Bonita BPM and Apache OFBiz
Vendor / product: Bonita BPM, Apache OFBiz
Public PoC: Yes
First tracked by RiskWire: 2026-07-28
Sources & citations (3)
- Pre-auth RCE in enterprise Java hits Bonita and OFBiz servers helpnetsecurity.com · 2026-08-05
- Enterprise Java Vulnerabilities Enable Pre-Auth RCE in Bonita BPM and Apache OFBiz gbhackers.com · 2026-08-07
- Multiple Flaws in Enterprise Java Platforms Allow Attackers to Execute Remote Code cybersecuritynews.com · 2026-08-07
References
See CVE-2026-31986 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →