CVE-2026-77686 | Dolibarr up to 23.0.4 Account htdocs/user/card.php ID improper authorization (Issue 39053)

August 21, 2026 Yanac

A vulnerability has been found in Dolibarr up to 23.0.4 and classified as critical. This affects an unknown part of the file htdocs/user/card.php of the component Account Handler. This manipulation of the argument ID causes improper authorization.

This vulnerability appears as CVE-2026-77686. The attack may be initiated remotely. In addition, an exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More