Vulnerability · Published Aug 24, 2026 · Assigned by VulnCheck

CVE-2026-71510Dolibarr < 24.0.0 Users REST API SQL Injection via filter parameter

Medium 6.5

In plain English

A medium-severity incorrect authorization in dolibarr from Dolibarr. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.4%top 67.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Dolibarr before 24.0.0 contains a SQL injection vulnerability in the users REST API that allows authenticated attackers with user-read rights to extract sensitive data by splicing unsanitized filter parameters into SQL WHERE clauses without column restrictions. Attackers can perform binary search on numeric fields and LIKE prefix iteration on string fields to recover salary figures and password verifiers omitted from normal API responses, while raw database error messages in the same endpoint enable column name enumeration.

Affected products (as reported)

Vendor	Product	Versions
Dolibarr	dolibarr	0 – before 24.0.0

Weakness: CWE-863 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

CodeAnt AI Blog technical-description, exploit
Dolibarr 24.0.0 Release Notes release-notes
Patch Commit patch
https://www.vulncheck.com/advisories/dolibarr-users-rest-api-sql-injection-via-filter-parameter third-party-advisory