Dolibarr Erp
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Dolibarr Erp.
By the Year
In 2026 there have been 2 vulnerabilities in Dolibarr Erp with an average score of 5.3 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 2 | 5.30 |
It may take a day or so for new Erp vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Dolibarr Erp Security Vulnerabilities
Dolibarr ERP Auth Byp via User Notes Handler ID <=18.0.10
CVE-2026-78160
5.3 - Medium
- August 24, 2026
A vulnerability has been found in Dolibarr ERP up to 18.0.10/22.0.5/23.0.3. This issue affects some unknown processing of the file /user/note.php of the component User Notes Handler. The manipulation of the argument ID leads to authorization bypass. The attack can be initiated remotely. Upgrading to version 23.0.4 and 24.0.0 is capable of addressing this issue. The identifier of the patch is 9b5229ef3a9b58d00252d327936b022fb739f149. Upgrading the affected component is advised.
Insecure Direct Object Reference / IDOR
Dolibarr ERP 23.0.3 TakePOS Module Missing Auth (CVE-2026-19350)
CVE-2026-19350
5.3 - Medium
- August 09, 2026
A vulnerability has been found in Dolibarr ERP up to 23.0.3. Affected is the function fail of the file htdocs/takepos/invoice.php of the component TakePOS Module. Such manipulation leads to missing authorization. The attack may be performed from remote. The name of the patch is 8992ce8704da947b6abe7b65a6fe59aed736bb81. It is advisable to implement a patch to correct this issue.
AuthZ
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Dolibarr Erp or by Dolibarr? Click the Watch button to subscribe.
