What is CVE-2026-58376?

CVE-2026-58376 is a high-severity vulnerability in Dolibarr, classified under SQL Injection. CVSS score: 7.6/10. Published 2026-06-30.

How severe is CVE-2026-58376?

High severity. CVSS v3 base score is 7.6 out of 10.

SQL Injection in Dolibarr

CVE-2026-58376

Dolibarr through 23.0.3, fixed in commit 14db36e, contains a sql injection vulnerability that allows authenticated API users to exfiltrate arbitrary database contents by supplying malicious values to the sqlfilters query parameter in the s…

Vulnerability class: SQL Injection

CVSS v3 metric

CVSS v3 base score 7.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L.

Affected products

Dolibarr — versions 0, 14db36e8486ef725b0d493d97abb2950a54358d3

Weakness classification (CWE)

CWE-89 — SQL Injection

References

disclosure@vulncheck.com (technical-description, exploit)
disclosure@vulncheck.com (issue-tracking)
disclosure@vulncheck.com (patch)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-58376?: CVE-2026-58376 is a high-severity vulnerability in Dolibarr, classified under SQL Injection. CVSS score: 7.6/10. Published 2026-06-30.
How severe is CVE-2026-58376?: High severity. CVSS v3 base score is 7.6 out of 10.