Dolibarr · week of 2 Nov 2026

Dolibarr security note

Records on this stack that changed between 2 Nov 2026 and the following Monday. Versions come from the stored ranges. A quiet week is not proof the stack is clear.

What changed

CVE-2026-33944 — Check if you run it
Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter
Fixed in 22.0.5 · 1 other ranges on the advisory

What we still do not know

Every changed record in this note has a version range.

Share this note

Dolibarr security note, week of 2 Nov 2026: 1 record has a version a customer can check, and 0 still do not. https://zerodayfindings.com/technologies/dolibarr/notes/2026-W45