Critical Vulnerability in Apache OFBiz Requires Immediate Patching

Apache OFBiz has a critical unauthenticated RCE vulnerability (CVE-2024-38856) fixed in 18.12.15; SonicWall researchers attribute the issue to authentication flaws that allow unauthenticated access to screen-rendering code when endpoints or screen definitions do not enforce permission checks. While no confirmed exploitation of this CVE has been observed, the report warns of attacker experimentation and references recent exploitation of a separate OFBiz flaw, recommending immediate upgrades to mitigate risk.