Live data from Hacker News

Dolibarr 23.0.0: PHP eval() whitelist bypass → RCE via two bugs (CVE-2026-22666)

jivasecurity.com

Post reply on HN

Print view View original

1–2 of 2 posts

Dolibarr 23.0.0: PHP eval() whitelist bypass → RCE via two bugs (CVE-2026-22666)

#1

Post by jiva » Mon, Apr 13, 2026, 1:26 PM UTC

Dolibarr 23.0.0: PHP eval() whitelist bypass → RCE via two bugs (CVE-2026-22666)
jivasecurity.com

Re: Dolibarr 23.0.0: PHP eval() whitelist bypass → RCE via two bugs (CVE-2026-22666)

#2

Post by jiva » Mon, Apr 13, 2026, 1:26 PM UTC

Root cause analysis and full PoC. Coordinated disclosure — patch is available as of 4/4/2026

Post reply on HN