JivaSecurity/DOLIBARR-RCE-CVE-2026-22666

PoC

dol_eval_standard() whitelist bypass eval() RCE, affecting Dolibarr 23.0.0 and below by jiva (jivasecurity.com)

view exploit source poc_in_githubauthor JivaSecuritypublished 2026-03-17catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-22666US	—	15.5% (97th)	Exploit	2026-04-07
Dolibarr ERP/CRM versions prior to 23.0.2 contain an authenticated remote code execution vulnerability in the dol_eval_standard() function that fails to apply forbidden string chec…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.