Story thread · 3 reports / 3 sources
Pre-auth RCE in enterprise Java hits Bonita and OFBiz servers
helpnetsecurity.com · 6d
How the coverage leans
Across 3 sources · syndicated copies counted once
An attacker sends a single web request to a Bonita server and lands inside an internal API that assumed nobody could reach it. The request arrives unauthenticated. From there the attacker runs code on the host. Bonita BPM handles loan approvals, insurance claims, and employee onboarding for banks, insurers, and government agencies, and its internal surface answers to strangers. Vulnerability researchers at Novee, found the path. They presented it today at Black Hat USA 2026 … More → The post Pre-auth RCE in enterprise Java hits Bonita and OFBiz servers appeared first on Help Net Security .
First report: New owners take over Plaza Bonita mall in National City — kpbs.org, 7d
The coverage
The conversation · 0
Sign in to join the conversation.
No comments yet — start the thread.