Vulnerability Description
Dolibarr ERP CRM 19.0.0 before 23.0.4 contains an SQL injection vulnerability that allows authenticated API users to inject SQL via the type field of the third-party bankaccounts REST endpoint. Attackers with only societe/creer permission can break out of the unescaped type value in CompanyBankAccount::create() to read password hashes and API keys via time-based blind subqueries.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/Dolibarr/dolibarr
- https://github.com/Dolibarr/dolibarr/blob/23.0.3/htdocs/societe/class/api_thirdp
- https://github.com/Dolibarr/dolibarr/blob/23.0.3/htdocs/societe/class/companyban
- https://github.com/Dolibarr/dolibarr/commit/19991c8ffa9b4fd7338b7ef2585fadb554b8
- https://www.vulncheck.com/advisories/dolibarr-erp-crm-19.0.0-before-23.0.4-sql-i
FAQ
What is CVE-2026-116218?
CVE-2026-116218 is a vulnerability with a CVSS score of 7.6 (HIGH). Dolibarr ERP CRM 19.0.0 before 23.0.4 contains an SQL injection vulnerability that allows authenticated API users to inject SQL via the type field of the third-party bankaccounts REST endpoint. Attack...
How severe is CVE-2026-116218?
CVE-2026-116218 has been rated HIGH with a CVSS base score of 7.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-116218?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.