{
  "title": "CVE of the day — CVE-2026-83542 (CVSS 9,8, critic)",
  "title_variants": [
    {
      "id": "v0",
      "title": "CVE of the day — CVE-2026-83542 (CVSS 9,8, critic)"
    },
    {
      "id": "v1",
      "title": "CVE-2026-83542: critical vulnerability, CVSS 9,8/10, type code injection, exploitable"
    }
  ],
  "description": "CVE-2026-83542: critical vulnerability, CVSS 9,8/10, type code injection, exploitable remotely, without privileges, without user interaction. Improper Control of Generation of Code ('Code Injection') in Apache OFBiz 24.09 before 24.09.08 on all platforms allows to remote unauthenticated attacker to..",
  "keywords": [
    "c",
    "cve-2026-83542",
    "vulnerability",
    "critical vulnerability",
    "cwe-94",
    "cvs",
    "cybersecurity",
    "cybersecurity",
    "♪",
    "security update"
  ],
  "scenes": [
    {
      "title": "CVE-2026- 835",
      "subtitle": "CVSS 9,8",
      "text": "CVE-2026-83542: Critical gravity, CVSS score 9,8 out of 10 according to the National Vulnerability Database."
    },
    {
      "title": "Code injection",
      "subtitle": "code injection · CVSS v3.1",
      "text": "Improper Control of Generation of Code ('Code Injection') in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to execute arbitrary code on the server by staging crafted widget.."
    },
    {
      "title": "EXPOSURE AND MITIGATION",
      "subtitle": "remotely exploitable, without privileges, without user interaction",
      "text": "Remotely exploitable Vulnerability, without privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD."
    }
  ],
  "publication_date": "2026-11-07T04:25:10.388Z",
  "duration": 20,
  "topic": "cve",
  "lang": "en",
  "translation_group": "cve-2026-11-07",
  "poster": "cve-2026-11-07-en.jpg",
  "preview": "cve-2026-11-07-en.gif",
  "og_card": "cve-2026-11-07-en.og.jpg",
  "audiogram": "cve-2026-11-07-en.audiogram.mp4",
  "captions": "cve-2026-11-07-en.vtt",
  "generation": {
    "procedural": true,
    "ai_generated": [
      "background",
      "voice"
    ],
    "real_data_source": "official public API",
    "filmed_real_event": false,
    "disclosure": "Procedurally generated from real public-source data; abstract AI-generated backgrounds; synthetic (TTS) voice. No real event is filmed or altered."
  },
  "transcript_text": "CVE-2026-83542: Critical gravity, CVSS score 9,8 out of 10 according to the National Vulnerability Database. Improper Control of Generation of Code ('Code Injection') in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to execute arbitrary code on the server by staging crafted widget.. Remotely exploitable Vulnerability, without privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD.",
  "transcript": [
    {
      "start": 0,
      "end": 6.667,
      "text": "CVE-2026-83542: Critical gravity, CVSS score 9,8 out of 10 according to the National Vulnerability Database."
    },
    {
      "start": 6.667,
      "end": 13.333,
      "text": "Improper Control of Generation of Code ('Code Injection') in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to execute arbitrary code on the server by staging crafted widget.."
    },
    {
      "start": 13.333,
      "end": 20,
      "text": "Remotely exploitable Vulnerability, without privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD."
    }
  ]
}