CVE-2026-118754

Dolibarr ERP CRM versions prior to 24.0.2 are affected by a missing authorization vulnerability in the htdocs/public/recruitment/view.php component. This flaw allows unauthenticated attackers to access unpublished draft job positions by enumerating sequential provisional references through the re...