CVE-2026-82894

A flaw was found in Apache OFBiz. An authorization vulnerability in the ContentWorker component allows a remote unauthenticated attacker to execute arbitrary internal services with attacker-controlled parameters. By sending a request to a publicly accessible view referencing manipulated content...