CVE-2026-92887

A flaw was found in Apache OFBiz. The REST API framework parser incorrectly defaults authentication to disabled when the auth attribute is omitted from an endpoint definition. A remote, unauthenticated attacker can exploit this vulnerability to invoke REST API operations without providing valid...