CVE-2026-105461
EUVD-2026-11752305.11.2026, 14:16
Missing check for ORDERMGR_UPDATE in ordermgr allows user with only ORDERMGR_VIEW permission to update orders. Affected versions before : 24.09.08 Users are recommended to upgrade to version 24.09.08 which fixes this issue.
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources
(CNA/ADP records, vendor advisories, Enginsight analysis).
| Vendor | Product | Version | Source |
|---|---|---|---|
| apache | ofbiz | 𝑥 < 24.9.8 | CNA |
Common Weakness Enumeration
Vulnerability Media Exposure