CVE-2026-81816

Apache OFBiz versions 24.09 before 24.09.08 are vulnerable to an XML External Entity (XXE) Injection in the ContentWorker component. A remote authenticated attacker with content-author permissions can store a crafted text/xml DataResource containing an external entity declaration. Because the ren...