CVE-2026-83542 — Apache OFBiz: Unauthenticated RCE via login-page widget injection

Apache OFBiz versions before 24.09.08 contain a code-injection vulnerability that allows a remote unauthenticated attacker to execute arbitrary code on the server.