Product

Dolibarr (9.0.0-23.0.4)

1 brief RSS

Dolibarr Members REST API Improper Authorization Vulnerability

An improper authorization vulnerability (CVE-2026-71504) in Dolibarr prior to version 24.0.0 allows authenticated users to overwrite the credentials of any account via the Members REST API.

Dolibarr +2 vulnerability rest-api privilege-escalation cve-2026-71504 sqli web-vulnerability cve-2026-81730 path-traversal +1

2r 2t 1c updated 4m ago