CVE-2026-116218 | Dolibarr up to 23.0.3 Third-Party Bankaccounts Rest Endpoint create type sql injection

October 26, 2026 Yanac

A vulnerability was found in Dolibarr up to 23.0.3. It has been rated as critical. The impacted element is the function CompanyBankAccount::create of the component Third-Party Bankaccounts Rest Endpoint. This manipulation of the argument Type causes sql injection.

This vulnerability appears as CVE-2026-116218. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More