Remote Protection Mechanism Failure in Dolibarr Application by Vendor
CVE-2026-112361

5.3MEDIUM

Key Information:

Vendor

Dolibarr

Status
Dolibarr
Vendor
CVE Published:
19 October 2026

What is CVE-2026-112361?

A security vulnerability has been identified in Dolibarr ERP & CRM versions up to 23.0.2, specifically within the unknown function of htdocs/document.php in the CSP component. This flaw allows malicious actors to manipulate the application, leading to the failure of protective mechanisms. The vulnerability can be exploited remotely, necessitating immediate action. Users are advised to upgrade to version 24.0.0, which addresses this vulnerability with the implemented patch identified as 9f9ffa288d4ad2632c1d5dd88272c699a592f4ec.

Affected Version(s)

Dolibarr 23.0.0

Dolibarr 23.0.1

Dolibarr 23.0.2

References

https://vuldb.com/vuln/422397
vdb-entry
https://vuldb.com/vuln/422397/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-112361
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mesh3l (VulDB User)
.