https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-27T07:34:09.668028+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-116219 fkie_cve-2026-116219 2026-10-27T07:34:09.669439+00:00

Dolibarr ERP CRM before 24.0.0 contains an OS command injection vulnerability in htdocs/admin/tools/export.php that lets authenticated administrators bypass the restrict_os_commands allowlist. Attackers can submit a mysqldump value chaining commands with & characters around an allowlisted basename to execute operating system commands as the web server user.

 https://db.gcve.eu/vuln/ghsa-3p5c-r87q-62gc GHSA-3p5c-r87q-62gc 2026-10-27T07:34:09.669502+00:00

Dolibarr ERP CRM before 24.0.0 contains an OS command injection vulnerability in htdocs/admin/tools/export.php that lets authenticated administrators bypass the restrict_os_commands allowlist. Attackers can submit a mysqldump value chaining commands with & characters around an allowlisted basename to execute operating system commands as the web server user.