Severity: moderate Affected versions:
- Apache OFBiz before 24.09.06 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue. Credit: Dohyun Yun (H4uN) (reporter) References: https://ofbiz.apache.org/ https://www.cve.org/CVERecord?id=CVE-2026-31909
