CVE-2026-114271

Apache OFBiz versions prior to 24.09.08 on all platforms are vulnerable to an Authorization Bypass (CWE-639) in the shopping list services. An authenticated low-privileged user, such as a self-registered ecommerce customer, can modify or take ownership of another party's shopping list and read it...