BRIEFOtherhighP58
0day RCE exploit for Apache OFBiz published on forum
Apache OFBiz
Detected11 September 2026 · 04:12 UTC
A working-looking remote code execution 0day against Apache OFBiz was posted today on BreachForums. OFBiz is an open-source ERP used by enterprises and some public-sector entities, so any internet-exposed instance is at risk of full compromise. Defenders should treat this as an urgent patch/mitigation signal and hunt for exploitation attempts against OFBiz endpoints.
CategoryOther
Severityhigh
Priority score58
Detected11 September 2026 · 04:12 UTC
Other● 60
Exploit zero-day de RCE para Apache OFBiz a la ventaA zero-day remote code execution exploit targeting Apache OFBiz is being sold on BreachForums. OFBiz underpins ERP and e-commerce operations at many enterprises, so a working RCE enables full server compromise and data theft. Organizations running OFBiz should prioritise patching and network monitoring.Other● 78
Exploit público para RCE crítica en Oracle WebLogic Proxy Plug-in (CVE-2026-21962)A working exploit for a critical remote code execution vulnerability in Oracle WebLogic Proxy Plug-in (CVE-2026-21962) was published on a Russian underground forum. WebLogic is widely deployed in enterprise and government environments, including Latin America, making this a potential initial access vector. Organizations should validate exposure and apply the vendor patch immediately.Other● 30
Solicitud de compra de base de datos peruana PE-9MA NulledBB user is seeking to buy a database named PE-9M.db, likely containing roughly 9 million records from Peru. The request shows that a substantial Peruvian personal data set continues to circulate in underground markets and could be used for fraud or targeted attacks. Although it is a wanted ad rather than a new leak, it is a useful signal for defenders monitoring exposure of Peruvian data.Other● 30
Solicitud de compra de datos de tarjetas brasileñas (CVV, CPF, etc.)An actor is actively seeking to buy Brazilian credit card data, including CVV, name, address, CPF, and region. This indicates a targeted interest in Brazilian financial information, which could be used for fraud. While it's a request, it signals demand for data from Latin America.Other● 35
Universidad Mayor de San Andrés sufre hackeo y posible fuga de datosThe hacker group AnkaTeam claimed to have attacked the Universidad Mayor de San Andrés (UMSA) in Bolivia. Specific details about compromised data have not been disclosed, but there is a risk of exposure of academic and personal information of students and staff. The university is advised to conduct a security audit and monitor for potential leaks on underground forums.Other● 50
Hackeo a la Universidad Mayor de San Andrés (UMSA) por AnkaTeamThe group AnkaTeam claims to have hacked the systems of Universidad Mayor de San Andrés (UMSA), one of Bolivia's leading universities. While the exact nature of the breach is unclear, the incident poses a significant security risk to the university community and the country's academic infrastructure.