Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
Enterprise Java Flaws Enable Pre-Auth RCE in Bonita BPM and Apache OFBiz
Excerpt
A newly disclosed 12 vulnerabilities affecting four enterprise Java platforms, including four pre-authentication flaws and a sandbox escape. Presented at Black Hat 2026, the research shows how overlooked middleware components, including routers, servlet dispatchers, SSO handlers, deserializers, and template engines, can combine to form complete remote code execution (RCE) chains. The most severe findings affect Bonita BPM 10.4.3 and Apache OFBiz 24.09.05. Although the…
Read the original report →Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-31986 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…