PT-2026-137505

Name of the Vulnerable Software and Affected Versions Apache OFBiz versions 24.09 through 24.09.07 Description An authentication bypass exists in the ExternalLoginKeysManager due to a capture-replay flaw. A remote unauthenticated attacker who captures a live externalLoginKey value can obtain a...