CVE-2026-46586

Apache OFBiz versions prior to 24.09.06 are vulnerable to Code Injection and Eval Injection due to improper control of code generation and improper neutralization of directives in dynamically evaluated code. Specifically, the traverseContent service fails to properly validate inputs, which can al...