What’s Vulnerable › Products

Dolibarr ERP CRM vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Dolibarr ERP CRM version is affected

Latest Dolibarr ERP CRM vulnerabilities

• CVE-2026-11619 — Dolibarr ERP CRM Legacy Filemanager config.inc.php improper authorization (CVSS 6.3)
• CVE-2026-10215 — Dolibarr ERP CRM Leave Request REST API api_holidays.class.php checkUserAccessToObject improper authorization (CVSS 4.3)
• CVE-2026-10154 — Dolibarr ERP CRM messaging.php authorization (CVSS 4.3)
• CVE-2026-7689 — Dolibarr ERP CRM Online Signature security.lib.php dol_verifyHash signature verification (CVSS 3.7)
• CVE-2026-7688 — Dolibarr ERP CRM Shipments API Endpoint expedition.class.php _checkValForAPI sql injection (CVSS 5.0)