PT-2026-69291

Name of the Vulnerable Software and Affected Versions Dolibarr ERP versions prior to 23.0.4 Description A remote issue exists in the TakePOS Module within the fail function of the htdocs/takepos/invoice.php file. This flaw allows for missing authorization, enabling a remote attacker to bypass...

CVE-2026-19350: Missing Authorization

A vulnerability has been found in Dolibarr ERP up to 23.0.3. Affected is the function fail of the file htdocs/takepos/invoice.php of the component TakePOS Module. Such manipulation leads to missing authorization. The attack may be performed from remote. The name of the patch is...