CVE-2026-110874 | Dolibarr up to 23.0.3 functions.lib.php jsonOrUnserialize deserialization

October 15, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Dolibarr up to 23.0.3. The affected element is the function jsonOrUnserialize of the file functions.lib.php. Such manipulation leads to deserialization.

This vulnerability is referenced as CVE-2026-110874. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More