Severity: moderate Affected versions:
- Apache OFBiz before 24.09.06 Description: Improper Access Control vulnerability in Apache OFBiz in multi-tenant deployments. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue. Credit: Krishna Uprit (reporter) References: https://ofbiz.apache.org/ https://www.cve.org/CVERecord?id=CVE-2026-31388
