Pre-auth RCE in enterprise Java hits Bonita and OFBiz servers
Pre-auth RCE in enterprise Java hits Bonita and OFBiz servers 2026-08-05 at 21:45 By Mirko Zorz An attacker sends a single web request to a Bonita server and lands inside an internal API that assumed nobody could reach it. The request arrives unauthenticated. From there the attacker runs code on the host. Bonita BPM handles […]
Pre-auth RCE in enterprise Java hits Bonita and OFBiz servers Read More »