CVE-2026-116218

Dolibarr ERP CRM version 19.0.0 before 23.0.4 is vulnerable to an SQL injection vulnerability. The flaw exists in the CompanyBankAccount::create() method because the type field of the third-party bankaccounts REST endpoint is not properly escaped. Authenticated API users with only societe/creer p...