CVE-2026-81728 | Dolibarr up to 23.x Import Wizard import.php import_insert updatekeys sql injection

August 27, 2026 Yanac

A vulnerability identified as critical has been detected in Dolibarr up to 23.x. The affected element is the function import_insert of the file htdocs/imports/import.php of the component Import Wizard. This manipulation of the argument updatekeys causes sql injection.

This vulnerability is handled as CVE-2026-81728. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More