[ Vendor · 2 CVEs ]
Dolibarr
CVEs affecting Dolibarr published in the last 30 days, plus any Dolibarr CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-110874 | 15 Oct 2026 | CVSS 6.6 | dolibarrDolibarr before 23.0.4 contains a PHP object injection vulnerability in jsonOrUnserialize() in functions.lib.php, which calls unserialize() without… | |
| CVE-2026-107706 | 8 Oct 2026 | CVSS 4.3 | dolibarrDolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax/updateextrafield.php that checks only read… |