CVE-2026-34036

🗓️ 31 Mar 2026 01:39:38Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 17 Views🌐 WEB

Dolibarr LFI in selectobject.php lets authenticated users read arbitrary non code files; affects 22.0.4 and earlier.

Reporter	Title	Published	Views	Family All 16
GithubExploit	Exploit for CVE-2026-34036	31 Mar 202620:32	–	githubexploit
ATTACKERKB	CVE-2026-34036	31 Mar 202601:39	–	attackerkb
Circl	CVE-2026-34036	25 Mar 202613:49	–	circl
CNNVD	Dolibarr 安全漏洞	31 Mar 202600:00	–	cnnvd
Cvelist	CVE-2026-34036 Dolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.php	31 Mar 202601:39	–	cvelist
Github Security Blog	Dolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.php	27 Mar 202618:04	–	github
NVD	CVE-2026-34036	31 Mar 202603:15	–	nvd
OSV	CVE-2026-34036 Dolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.php	31 Mar 202601:39	–	osv
OSV	GHSA-2MFJ-R695-5H9R Dolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.php	27 Mar 202618:04	–	osv
OSV	UBUNTU-CVE-2026-34036	31 Mar 202603:15	–	osv

NVD

Vulners

Node

dolibarr dolibarr_erp/crmRange≤22.0.4

[
  {
    "vendor": "Dolibarr",
    "product": "dolibarr",
    "versions": [
      {
        "version": "<= 22.0.4",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/Dolibarr/dolibarr/commit/743c22e57c0b2a017d6b92bec865d71ce6177a6a
github	www.github.com/Dolibarr/dolibarr/security/advisories/GHSA-2mfj-r695-5h9r

Parameter	Position	Path	Description	CWE
objectdesc	request body	/core/ajax/selectobject.php	Authenticated Local File Inclusion via objectdesc parameter exposing arbitrary local files on server.	CWE-98

17 Jun 2026 10:38Current

6Medium risk

Vulners AI Score6

CVSS 3.16.5

EPSS0.00419

SSVC

CWE-98