UpHeron
All vulnerabilities

Servers and applications

CVE-2026-125754

Dolibarr 20.0.0 through 23.0.4 and 24.x before 24.0.2 IDOR via ExpenseReport Payment API

Severity
High 7.1
Published
10 Nov 2026
Last changed
10 Nov 2026
Added to UpHeron
10 Nov 2026
Fixed in
24.0.2
Sources
CVE Program

Affected software

SoftwareAffected versions
Dolibarr ERP CRMServers and applications · cna:dolibarr|dolibarr
  • From 20.0.0 up to 23.0.4
  • From 24.0.0 before 24.0.2

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-125754