CVE-2026-37711

Dolibarr ERP/CRM versions v.22.0.0 through v.22.0.4 and v.24.0.0-alpha are vulnerable to a remote code execution flaw. The issue originates from the htdocs/core/actions_addupdatedelete.inc.php file, which allows a remote attacker to execute arbitrary code. While the severity is high, the specific...

CVE-2026-37711

An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/core/actionsaddupdatedelete.inc.php...

CVE-2026-37711: Improper Control of Generation of Code

An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/core/actionsaddupdatedelete.inc.php...