CVE-2026-71506Published
Dolibarr < 24.0.0 Payments REST API Improper Authorization via Delete Endpoint
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-71506 · Microsoft / collected KEV context
cve-program · CVE-2026-71506
- https://codeant.ai/security-research/cve-2026-71506-dolibarr-payment-deletion-via-incorrect-authorization
- https://github.com/Dolibarr/dolibarr/releases/tag/24.0.0
- https://github.com/Dolibarr/dolibarr/commit/e01a12ffea4675f5bcc1c886f06ec6a29d5e4801
- https://www.vulncheck.com/advisories/dolibarr-payments-rest-api-improper-authorization-via-delete-endpoint
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.