CVE-2026-105325

Apache OFBiz is vulnerable to a missing authorization check in its accounting services. Specifically, the system fails to verify ACCOUNTING_UPDATE or ACCOUNTING_CREATE permissions, which allows a user with only ACCOUNTING_VIEW permissions to update or create a PaymentApplication . This vulnerabil...