Skip to content
OpenAdvisories

Archive

11 September 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-89012 Public exploit

    Dolibarr 24.0.0 < 24.0.1 SQL Filter Denylist Bypass via sqlfilters Parameter

    Dolibarr 24.0.0 before 24.0.1 contains a case-sensitive denylist bypass vulnerability in the sqlfilters API query parameter that allows authenticated attackers to recover protected database fields by supplying uppercase variants of denylist-protected field na…

  • Medium 5.9
    CVE-2026-81861 Public exploit

    CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information…