CVE-2026-84183 — Apache OFBiz: Content Manager VIEW-only RCE in updateLayout

Apache OFBiz versions 24.09 before 24.09.08 contain an authorization flaw that may allow a remote authenticated attacker to execute arbitrary commands as the OFBiz process user.