Dolibarr 23.0.0: PHP eval() whitelist bypass → RCE via two bugs (CVE-2026-22666) (opens in new tab)

(jivasecurity.com)

2 pointsjiva2mo ago1 comments

1 comments

1 comments · 1 top-level

jivaOP2mo ago

Root cause analysis and full PoC. Coordinated disclosure — patch is available as of 4/4/2026

j / k navigate · click thread line to collapse