Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how dolibarr compares to other vendors in security performance

View Risk Score →

dolibarr Dolibarr ERPDolibarr ERP TakePOS invoice.php fail authorization

Risk 46
Severity
5.3
First published (updated )
CVE-2026-19350

dolibarr DolibarrDolibarr - SQL Injection via sqlfilters Parameter in Multiple REST API List Endpoints

Risk 58
Severity
7.2
First published (updated )
CVE-2026-58376

dolibarr Dolibarr ERP CRMDolibarr ERP CRM Legacy Filemanager config.inc.php improper authorization

Risk 46
Severity
2.1
First published (updated )
CVE-2026-11619

dolibarr Dolibarr ERP CRMDolibarr ERP CRM Leave Request REST API api_holidays.class.php checkUserAccessToObject improper authorization

Risk 22
Severity
2.1
First published (updated )
CVE-2026-10215

dolibarr Dolibarr ERP CRMDolibarr ERP CRM messaging.php authorization

Risk 26
Severity
5.3
First published (updated )
CVE-2026-10154
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

dolibarr Dolibarr ERP/CRMCode Injection

Risk 51
Severity
7.3
First published (updated )
CVE-2026-37713

dolibarr Dolibarr ERP/CRMCode Injection

Risk 51
Severity
7.3
First published (updated )
CVE-2026-37712

dolibarr Dolibarr ERP/CRMCode Injection

Risk 51
Severity
7.3
First published (updated )
CVE-2026-37711

dolibarr Dolibarr ERP CRMDolibarr ERP CRM 7.0.3 Remote Code Execution via install/step1.php

Risk 86
Severity
9.3
First published (updated )
CVE-2018-25357

dolibarr DolibarrDolibarr has an Authenticated Remote Code Execution via eval() injection in user extrafields

Risk 72
Severity
8.6
First published (updated )
CVE-2025-67486
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

dolibarr Dolibarr ERP CRMDolibarr ERP CRM Online Signature security.lib.php dol_verifyHash signature verification

Risk 15
Severity
2.9
EPSS
0.01%
First published (updated )
CVE-2026-7689

dolibarr Dolibarr ERP CRMDolibarr ERP CRM Shipments API Endpoint expedition.class.php _checkValForAPI sql injection

Risk 28
Severity
1.3
EPSS
0.02%
First published (updated )
CVE-2026-7688

dolibarr Dolibarr ERP & CRMCode Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2026-31018

dolibarr Dolibarr ERP & CRM Website moduleOS Command Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2026-31019

dolibarr DolibarrDolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration

Risk 75
Severity
9.4
First published (updated )
CVE-2026-23500
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

CVE-2026-22666: Dolibarr 23.0.0 dol_eval() whitelist bypass -> RCE (full write-up + PoC)

First published (updated )
Social
reddit

CVE-2026-22666: Dolibarr 23.0.0 dol_eval() whitelist bypass -> RCE (full write-up + PoC)

First published (updated )
Social
reddit

dolibarr Dolibarr ERP-CRMDolibarr ERP-CRM 8.0.4 SQL Injection via rowid Parameter

Risk 66
Severity
8.8
First published (updated )
CVE-2019-25710

dolibarr Dolibarr ERP/CRMDolibarr ERP/CRM < 23.0.2 Authenticated RCE via dol_eval_standard()

Risk 77
Severity
8.6
First published (updated )
CVE-2026-22666

composer/dolibarr/dolibarrDolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.php

Risk 38
Severity
6.5
First published (updated )
CVE-2026-34036
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

dolibarr Dolibarr ERP/CRMDolibarr ERP/CRM 10.0.1 SQL Injection via elemid

Risk 57
Severity
8.8
First published (updated )
CVE-2019-25452

dolibarr Dolibarr ERP/CRMDolibarr ERP/CRM 10.0.1 SQL Injection via card.php

Risk 43
Severity
7.5
First published (updated )
CVE-2019-25450

dolibarr Dolibarr ERP & CRMCSRF

Risk 74
Severity
9
First published (updated )
CVE-2025-69634

dolibarr DolibarrDolibarr 11.0.3 - 'ldap.php' - Persistent Cross-Site Scripting

Risk 39
Severity
6.4
First published (updated )
CVE-2020-36966

dolibarr Dolibarr ERP-CRMDolibarr ERP-CRM 14.0.2 - Stored Cross-Site Scripting (XSS) / Privilege Escalation

Risk 61
Severity
8.4
First published (updated )
CVE-2021-47779
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

dolibarr ERP & CRMCode Injection

Risk 77
Severity
8.8
First published (updated )
CVE-2025-56588

dolibarr ERP/CRMDolibarr ERP/CRM Post-Auth OS Command Injection

Risk 81
Severity
9.4
First published (updated )
CVE-2012-10059

composer/dolibarr/dolibarrXSS

Risk 74
Severity
9
First published (updated )
CVE-2024-55228

composer/dolibarr/dolibarrXSS

Risk 74
Severity
9
First published (updated )
CVE-2024-55227

composer/dolibarr/dolibarrImproper Authorization in dolibarr/dolibarr

Risk 23
Severity
4.3
First published (updated )
CVE-2021-3991
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203