Medium severity6.3NVD Advisory· Published Jun 9, 2026· Updated Jun 9, 2026

CVE-2026-11619

Description

A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. The impacted element is an unknown function of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy Filemanager. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. Upgrading to version 23.0.3 is sufficient to resolve this issue. The identifier of the patch is f1b2dd6481e22cacb561d29ffdcd3a50b618479d. Upgrading the affected component is advised.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dolibarr/Dolibarrreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=23.0.2

Patches

Vulnerability mechanics

References

github.com/Dolibarr/dolibarr/releases/tag/23.0.3nvd
github.com/dolibarr/dolibarr/commit/f1b2dd6481e22cacb561d29ffdcd3a50b618479dnvd
vuldb.com/cve/CVE-2026-11619nvd
vuldb.com/submit/834038nvd
vuldb.com/vuln/369300nvd
vuldb.com/vuln/369300/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000