https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-27T14:29:08.004879+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-116218 fkie_cve-2026-116218 2026-10-27T14:29:08.040566+00:00

Dolibarr ERP CRM 19.0.0 before 23.0.4 contains an SQL injection vulnerability that allows authenticated API users to inject SQL via the type field of the third-party bankaccounts REST endpoint. Attackers with only societe/creer permission can break out of the unescaped type value in CompanyBankAccount::create() to read password hashes and API keys via time-based blind subqueries.

 https://db.gcve.eu/vuln/ghsa-m4jj-h65f-p4xj GHSA-m4jj-h65f-p4xj 2026-10-27T14:29:08.040643+00:00

Dolibarr ERP CRM 19.0.0 before 23.0.4 contains an SQL injection vulnerability that allows authenticated API users to inject SQL via the type field of the third-party bankaccounts REST endpoint. Attackers with only societe/creer permission can break out of the unescaped type value in CompanyBankAccount::create() to read password hashes and API keys via time-based blind subqueries.