CVE-2026-82916

A flaw was found in Apache OFBiz. A remote authenticated user with low-level permissions can bypass authorization controls within the data export component by submitting requests with unvalidated file path parameters. This flaw allows an attacker to export sensitive database records, including us...