Packagist/dolibarr/dolibarr CVE-2026-34036: medium 6.5

Dolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.php

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-2mfj-r695-5h9r
• https://github.com/Dolibarr/dolibarr/security/advisories/GHSA-2mfj-r695-5h9r
• https://nvd.nist.gov/vuln/detail/CVE-2026-34036
• https://github.com/Dolibarr/dolibarr/commit/743c22e57c0b2a017d6b92bec865d71ce6177a6a
• https://github.com/Dolibarr/dolibarr

CVE-2026-34036 · published 2026-03-27T18:04:19Z · modified 2026-03-31T18:48:55.713158Z · JSON