CERT24CVE-2026-116219 — OS command injection via the mysqldump parameter in Dolibarr ERP CRM before 24.0.0Loading data…
CERT24Threat Observatory
Period

CVE-2026-116219 — OS command injection via the mysqldump parameter in Dolibarr ERP CRM before 24.0.0

Dolibarr ERP CRM versions before 24.0.0 contain an OS command injection vulnerability in htdocs/admin/tools/export.php. Authenticated administrators can bypass the restrict_os_commands allowlist and execute operating system commands as the web server user.

← Back to intelligence

CVE-2026-116219 — OS command injection via the mysqldump parameter in Dolibarr ERP CRM before 24.0.0

Dolibarr ERP CRM versions before 24.0.0 contain an OS command injection vulnerability in htdocs/admin/tools/export.php. Authenticated administrators can bypass the restrict_os_commands allowlist and execute operating system commands as the web server user.