CVE-2026-31019

The Website module of Dolibarr ERP & CRM (version 22.0.4 and below ) is vulnerable to Remote Code Execution (RCE) due to a flaw in its blacklist-based filtering of dangerous PHP functions. An authenticated user possessing permissions to edit PHP content can bypass these restrictions to execute ar...