CVE-2026-73577

Apache OFBiz versions 24.09 before 24.09.08 are vulnerable to an unauthenticated path-suffix view authorization bypass in the RequestHandler . The root cause is incorrect authorization logic where the servlet authorizes a request based on a public path component but renders a protected suffix vie...