Executive brief
Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration
Affected products
- Packagist dolibarr/dolibarr
Junglewise Threat Intelligence
CVE-2026-23500: Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration
CVE-2026-23500 · Severity: low · CVSS 3.1 · Published 2026-04-17
Technologies: dolibarr/dolibarr (Packagist). Vendors: Packagist.