A vulnerability was found in Apache OFBiz up to 24.09.05 . It has been declared as critical . This affects an unknown part. The manipulation results in code injection. This vulnerability was named CVE-2026-46586 . The attack needs to be approached within the local network. There is no available exploit. It is recommended to upgrade the affected component.