cveboard RSS feed

CVE-2026-78160

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2026
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Dolibarr ERP User Notes note.php authorization

A vulnerability has been found in Dolibarr ERP up to 18.0.10/22.0.5/23.0.3. This issue affects some unknown processing of the file /user/note.php of the component User Notes Handler. The manipulation of the argument ID leads to authorization bypass. The attack can be initiated remotely. Upgrading to version 23.0.4 and 24.0.0 is capable of addressing this issue. The identifier of the patch is 9b5229ef3a9b58d00252d327936b022fb739f149. Upgrading the affected component is advised.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

ERP

Vendor
Dolibarr
Product
ERP
Platforms
Unknown
Default status
Unknown
ERP · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
18.0.0affectedUnavailableUnavailableUnavailableNone listed
18.0.1affectedUnavailableUnavailableUnavailableNone listed
18.0.2affectedUnavailableUnavailableUnavailableNone listed
18.0.3affectedUnavailableUnavailableUnavailableNone listed
18.0.4affectedUnavailableUnavailableUnavailableNone listed
18.0.5affectedUnavailableUnavailableUnavailableNone listed
18.0.6affectedUnavailableUnavailableUnavailableNone listed
18.0.7affectedUnavailableUnavailableUnavailableNone listed
18.0.8affectedUnavailableUnavailableUnavailableNone listed
18.0.9affectedUnavailableUnavailableUnavailableNone listed
18.0.10affectedUnavailableUnavailableUnavailableNone listed
22.0.0affectedUnavailableUnavailableUnavailableNone listed
22.0.1affectedUnavailableUnavailableUnavailableNone listed
22.0.2affectedUnavailableUnavailableUnavailableNone listed
22.0.3affectedUnavailableUnavailableUnavailableNone listed
22.0.4affectedUnavailableUnavailableUnavailableNone listed
22.0.5affectedUnavailableUnavailableUnavailableNone listed
23.0.0affectedUnavailableUnavailableUnavailableNone listed
23.0.1affectedUnavailableUnavailableUnavailableNone listed
23.0.2affectedUnavailableUnavailableUnavailableNone listed
23.0.3affectedUnavailableUnavailableUnavailableNone listed
23.0.4unaffectedUnavailableUnavailableUnavailableNone listed
24.0.0unaffectedUnavailableUnavailableUnavailableNone listed