CVE-2026-85627 — Apache OFBiz: Authenticated Code Execution Vulnerability

In Apache OFBiz 24.09 before 24.09.08, a remote authenticated attacker with only a stock non-administrative account can execute arbitrary operating system commands as the OFBiz process user.