Organizations using Apache OFBiz are being urged to address a critical vulnerability affecting versions through 18.12.14, with a fix in version 18.12.15. This vulnerability, recently tracked as CVE-2024-38856, stems from unauthenticated endpoints allowing screen-rendering code execution under specific conditions, primarily when screen definitions do not check user permissions. SonicWall researchers, who identified the vulnerability, attributed it to an authentication mechanism issue, enabling unauthenticated remote code execution RCE. Although no attacks exploiting CVE-2024-38856 have been reported, another vulnerability, CVE-2024-32113, discovered in May, has been actively targeted. This path traversal bug can also lead to remote execution of arbitrary code, with increasing exploitation attempts reported in late July, potentially involving Mirai botnet variants. Apache OFBiz, a free ERP framework used by several major companies, mainly in the US, India, and Europe, underscores the critical need for users to upgrade to version 18.12.15 to safeguard sensitive business data and maintain system security. CTIX analysts urge administrators to ensure that they are keeping their Apache instances up-to-date with the most recent patches to prevent future exploitation.