Executive brief
Dolibarr has Insufficient Verification of Data Authenticity
Affected products
- Packagist dolibarr/dolibarr
Junglewise Threat Intelligence
CVE-2026-7689: Dolibarr has Insufficient Verification of Data Authenticity
CVE-2026-7689 · Severity: low · CVSS 3.1 · Published 2026-05-03
Technologies: dolibarr/dolibarr (Packagist). Vendors: Packagist.
Related threats
- Dolibarr ERP CRM improper authorization in Leave Request REST API
- Dolibarr ERP CRM SQL injection in Shipments API Endpoint
- Dolibarr ERP & CRM RCE via blacklist bypass in Website module
- Dolibarr ERP & CRM PHP code injection in Website module
- Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration