Canonical · Dolibarr · CVE-2026-37711
**Name of the Vulnerable Software and Affected Versions**
Dolibarr ERP/CRM versions 22.0.0 through 22.0.4
Dolibarr ERP/CRM version 24.0.0-alpha
**Description**
A remote attacker can execute arbitrary code through the 'htdocs/core/actions addupdatedelete.inc.php' endpoint.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.