CVE-2026-XXXXXX — Remote Code Execution in Dolibarr ERP/CRM (dol_eval sandbox bypass)
An incomplete sandbox in dol_eval_standard() lets an admin achieve RCE via a computed extrafield — three filter bypasses. CVSS 3.1 9.1 CRITICAL.
read →CVE analyses, OWASP methodologies and pentesting fundamentals — from a practitioner's perspective.
An incomplete sandbox in dol_eval_standard() lets an admin achieve RCE via a computed extrafield — three filter bypasses. CVSS 3.1 9.1 CRITICAL.
read →An editor (Read & write) can set a survey's Custom Head Scripts — a capability reserved for the Manage role — and run code in an admin's session. Self-hosted. CVSS 4.0 5.1 MEDIUM.
read →Participant display names (From, To, CC, BCC, Reply-To) are not escaped in the print template, and the Print window has no CSP. CVSS 8.1 HIGH.
read →The localtax1_value parameter reaches an UPDATE query without sanitisation — full database exfiltration.
read →Missing server-side validation of the username field enables XSS during impersonation.
read →Three verification levels, practical examples and a case study from real pentests.
read →How the new threat categories will affect application testing methodologies.
read →Types of pentests (black/grey/white-box) and why they are essential.
read →Deepfakes, personalised attacks and the role of phishing campaigns in defence.
read →