A vulnerability labeled as critical has been found in Apache OFBiz up to 24.09.05 . The affected element is an unknown function. Executing a manipulation can lead to server-side request forgery. This vulnerability is tracked as CVE-2026-31910 . The attack can be launched remotely. No exploit exists. The affected component should be upgraded.