An improper authorization vulnerability (CVE-2026-71504) in Dolibarr prior to version 24.0.0 allows authenticated users to overwrite the credentials of any account via the Members REST API.
Dolibarr +2
vulnerability
rest-api
privilege-escalation
cve-2026-71504
sqli
web-vulnerability
cve-2026-81730
path-traversal
+1
2r
2t
1c
updated