CVE-2026-68524

A flaw was found in Apache OFBiz. An unauthenticated remote attacker can exploit improper temporary file handling by accessing an open file descriptor and injecting a file URI Uniform Resource Identifier. This issue allows the attacker to force the application to load an attacker-controlled scree...