CVE-2026-109856

A flaw was found in Apache OFBiz. An authenticated user with low-level privileges can bypass access controls by sending direct requests to restricted financial account services. This vulnerability allows an attacker to escalate privileges and create, modify, or cancel financial account balances a...