CVE-2026-114233 | Apache OFBiz up to 24.09.7 Order Manager updateShipGroupShipInfo/appendOrderItem permission

November 5, 2026 Yanac

A vulnerability has been found in Apache OFBiz up to 24.09.7 and classified as problematic. Affected is the function updateShipGroupShipInfo/appendOrderItem of the component Order Manager. The manipulation leads to permission issues.

This vulnerability is documented as CVE-2026-114233. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More