Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
Dolibarr CVE-2026-33944
Dolibarr is an open-source enterprise resource planning and customer relationship management application. Prior to 22.0.5 and 23.0.1, there is a SQL injection v
0 CVEs and 0 credit lines.
-
Dolibarr CVE-2026-118754
Dolibarr ERP CRM before 24.0.2 contains a missing authorization vulnerability in htdocs/public/recruitment/view.php that allows unauthenticated attackers to vie
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Dolibarr CVE-2026-116219
Dolibarr ERP CRM before 24.0.0 contains an OS command injection vulnerability in htdocs/admin/tools/export.php that lets authenticated administrators bypass the
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Dolibarr CVE-2026-116218
Dolibarr ERP CRM 19.0.0 before 23.0.4 contains an SQL injection vulnerability that allows authenticated API users to inject SQL via the type field of the third-
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Dolibarr CVE-2026-112361
A vulnerability has been found in Dolibarr up to 23.0.2. The impacted element is an unknown function of the file htdocs/document.php of the component CSP. Such
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Dolibarr dolibarr-2026-10
Dolibarr Security Releases - October 2026
2 CVEs and 2 credit lines. None claimed yet.
0 of 2 credit lines claimed Claim credit