CVE-2026-118754 | Dolibarr up to 24.0.1 Recruitment View view.php ref improper authorization

October 29, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Dolibarr up to 24.0.1. The impacted element is an unknown function of the file htdocs/public/recruitment/view.php of the component Recruitment View. The manipulation of the argument ref results in improper authorization.

This vulnerability is identified as CVE-2026-118754. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More