01 Record

CVE-2026-77686

Dolibarr Account card.php improper authorization

MediumPUBLISHEDCNA: VulDB

Base score5.3 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

02 Description

Dolibarr Account card.php improper authorization

Published

2026-08-21 11:00Z14 HR AGO

Last updated

2026-08-21 21:44Z3 HR AGO

Reserved

2026-08-21

Assigning CNA

VulDB

Record state

PUBLISHED

Severity

Medium (CVSS 5.3)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Weaknesses

SSVC decision

ExploitationpocAutomatablenoTechnical Impactpartial

Data version

5.2

Document digest

2ac851a117035c3c88532bb9deebd6511518a8eeac11b3b4472419d8e16a2774

VendorProductVersionsPlatforms

n/aDolibarr23.0.0, 23.0.1, 23.0.2, 23.0.3, 23.0.4—

vuldb.comVDB-394034 | Dolibarr Account card.php improper authorizationhttps://vuldb.com/vuln/394034vdb-entrytechnical-description
vuldb.comVDB-394034 | CTI Indicators (IOB, IOC, TTP, IOA)https://vuldb.com/vuln/394034/ctisignaturepermissions-required
vuldb.comCVE-2026-77686 | CVE Analysis and Reporthttps://vuldb.com/cve/CVE-2026-77686third-party-advisory
vuldb.comSubmit #881202 | dolibarr software * Privilege Bypass Allows Any User to Delete Admin Accountshttps://vuldb.com/submit/881202third-party-advisory
github.comhttps://github.com/Dolibarr/dolibarr/issues/39053exploitissue-tracking
github.comhttps://github.com/Dolibarr/dolibarr/pull/39119issue-trackingpatch
github.comhttps://github.com/Dolibarr/dolibarr/commit/b2a2c995537cb6282383b5e903cb5ffa29b823e6patch
github.comhttps://github.com/Dolibarr/dolibarr/releases/tag/24.0.0patch
github.comhttps://github.com/Dolibarr/dolibarr/product