tocsin

CVE-2026-31019

1 advisory.

Packagist/dolibarr/dolibarr CVE-2026-31019: high 8.8, EPSS 1.02%

Dolibarr user with permission to edit PHP content can bypass filtering to restrict dangerous PHP functions

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-22.0.4

Fixed versions

No fixed version in the source.

Sources

CVE-2026-31019 · published · modified · JSON