CVE-2026-85401

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-85401", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-09-03T18:25:32.291Z", "datePublished": "2026-09-04T02:45:11.085Z", "dateUpdated": "2026-09-04T18:17:48.182Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-09-04T02:45:11.085Z"}, "title": "Dolibarr Legacy File Manager config.inc.php access control", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-284", "lang": "en", "description": "Improper Access Controls"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-266", "lang": "en", "description": "Incorrect Privilege Assignment"}]}], "affected": [{"vendor": "n/a", "product": "Dolibarr", "versions": [{"version": "21.0.0", "status": "affected"}, {"version": "21.0.1", "status": "affected"}, {"version": "21.0.2", "status": "affected"}, {"version": "21.0.3", "status": "affected"}, {"version": "21.0.4", "status": "affected"}, {"version": "22.0.0", "status": "affected"}, {"version": "22.0.1", "status": "affected"}, {"version": "22.0.2", "status": "affected"}, {"version": "22.0.3", "status": "affected"}, {"version": "22.0.4", "status": "affected"}, {"version": "22.0.5", "status": "affected"}, {"version": "23.0.0", "status": "affected"}, {"version": "23.0.1", "status": "affected"}, {"version": "23.0.2", "status": "affected"}, {"version": "23.0.3", "status": "affected"}, {"version": "23.0.4", "status": "unaffected"}], "cpes": ["cpe:2.3:a:dolibarr:dolibarr:*:*:*:*:*:*:*:*"], "modules": ["Legacy File Manager"]}], "descriptions": [{"lang": "en", "value": "A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy File Manager. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 23.0.4 can resolve this issue. This patch is called ef6631e9bd5ec4b8cec0e88f1796d3d10dad02ec. It is suggested to upgrade the affected component."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}], "timeline": [{"time": "2026-09-03T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-09-03T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-09-03T20:30:43.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "Abderrahmane Aksoum (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/vuln/398543", "name": "VDB-398543 | Dolibarr Legacy File Manager config.inc.php access control", "tags": ["vdb-entry"]}, {"url": "https://vuldb.com/vuln/398543/cti", "name": "VDB-398543 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-85401", "name": "CVE-2026-85401 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/894869", "name": "Submit #894869 | Dolibarr -server 21.0/22.0 BROKEN ACCESS CONTROL (STILL UNPATCHED) in File Manager Endpoint", "tags": ["third-party-advisory"]}, {"url": "https://github.com/Dolibarr/dolibarr/issues/38963", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/Dolibarr/dolibarr/pull/39731", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/Dolibarr/dolibarr/commit/ef6631e9bd5ec4b8cec0e88f1796d3d10dad02ec", "tags": ["patch"]}, {"url": "https://github.com/Dolibarr/dolibarr/releases/tag/23.0.4", "tags": ["patch"]}, {"url": "https://github.com/Dolibarr/dolibarr/", "tags": ["product"]}], "tags": ["x_open-source"], "x_generator": ["VulDB PVTS v202609"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-04T18:17:35.706808Z", "id": "CVE-2026-85401", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-04T18:17:48.182Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-85401", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-04T18:17:35.706808Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-04T18:17:44.085Z"}}], "cna": {"tags": ["x_open-source"], "title": "Dolibarr Legacy File Manager config.inc.php access control", "credits": [{"lang": "en", "type": "reporter", "value": "Abderrahmane Aksoum (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}], "affected": [{"cpes": ["cpe:2.3:a:dolibarr:dolibarr:*:*:*:*:*:*:*:*"], "vendor": "n/a", "modules": ["Legacy File Manager"], "product": "Dolibarr", "versions": [{"status": "affected", "version": "21.0.0"}, {"status": "affected", "version": "21.0.1"}, {"status": "affected", "version": "21.0.2"}, {"status": "affected", "version": "21.0.3"}, {"status": "affected", "version": "21.0.4"}, {"status": "affected", "version": "22.0.0"}, {"status": "affected", "version": "22.0.1"}, {"status": "affected", "version": "22.0.2"}, {"status": "affected", "version": "22.0.3"}, {"status": "affected", "version": "22.0.4"}, {"status": "affected", "version": "22.0.5"}, {"status": "affected", "version": "23.0.0"}, {"status": "affected", "version": "23.0.1"}, {"status": "affected", "version": "23.0.2"}, {"status": "affected", "version": "23.0.3"}, {"status": "unaffected", "version": "23.0.4"}]}], "timeline": [{"lang": "en", "time": "2026-09-03T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-09-03T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-09-03T20:30:43.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/398543", "name": "VDB-398543 | Dolibarr Legacy File Manager config.inc.php access control", "tags": ["vdb-entry"]}, {"url": "https://vuldb.com/vuln/398543/cti", "name": "VDB-398543 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-85401", "name": "CVE-2026-85401 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/894869", "name": "Submit #894869 | Dolibarr -server 21.0/22.0 BROKEN ACCESS CONTROL (STILL UNPATCHED) in File Manager Endpoint", "tags": ["third-party-advisory"]}, {"url": "https://github.com/Dolibarr/dolibarr/issues/38963", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/Dolibarr/dolibarr/pull/39731", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/Dolibarr/dolibarr/commit/ef6631e9bd5ec4b8cec0e88f1796d3d10dad02ec", "tags": ["patch"]}, {"url": "https://github.com/Dolibarr/dolibarr/releases/tag/23.0.4", "tags": ["patch"]}, {"url": "https://github.com/Dolibarr/dolibarr/", "tags": ["product"]}], "x_generator": ["VulDB PVTS v202609"], "descriptions": [{"lang": "en", "value": "A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy File Manager. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 23.0.4 can resolve this issue. This patch is called ef6631e9bd5ec4b8cec0e88f1796d3d10dad02ec. It is suggested to upgrade the affected component."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-284", "description": "Improper Access Controls"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-266", "description": "Incorrect Privilege Assignment"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-09-04T02:45:11.085Z"}}}, "cveMetadata": {"cveId": "CVE-2026-85401", "state": "PUBLISHED", "dateUpdated": "2026-09-04T18:17:48.182Z", "dateReserved": "2026-09-03T18:25:32.291Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-09-04T02:45:11.085Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:dolibarr:dolibarr:*:*:*:*:*:*:*:*"], "modules": ["Legacy File Manager"], "product": "Dolibarr", "vendor": "n/a", "versions": [{"status": "affected", "version": "21.0.0"}, {"status": "affected", "version": "21.0.1"}, {"status": "affected", "version": "21.0.2"}, {"status": "affected", "version": "21.0.3"}, {"status": "affected", "version": "21.0.4"}, {"status": "affected", "version": "22.0.0"}, {"status": "affected", "version": "22.0.1"}, {"status": "affected", "version": "22.0.2"}, {"status": "affected", "version": "22.0.3"}, {"status": "affected", "version": "22.0.4"}, {"status": "affected", "version": "22.0.5"}, {"status": "affected", "version": "23.0.0"}, {"status": "affected", "version": "23.0.1"}, {"status": "affected", "version": "23.0.2"}, {"status": "affected", "version": "23.0.3"}, {"status": "unaffected", "version": "23.0.4"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy File Manager. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 23.0.4 can resolve this issue. This patch is called ef6631e9bd5ec4b8cec0e88f1796d3d10dad02ec. It is suggested to upgrade the affected component."}], "id": "CVE-2026-85401", "lastModified": "2026-09-04T19:17:31.863", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-85401", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-09-04T18:17:35.706808Z", "version": "2.0.3"}}]}, "published": "2026-09-04T03:17:46.677", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/Dolibarr/dolibarr/"}, {"source": "cna@vuldb.com", "url": "https://github.com/Dolibarr/dolibarr/commit/ef6631e9bd5ec4b8cec0e88f1796d3d10dad02ec"}, {"source": "cna@vuldb.com", "url": "https://github.com/Dolibarr/dolibarr/issues/38963"}, {"source": "cna@vuldb.com", "url": "https://github.com/Dolibarr/dolibarr/pull/39731"}, {"source": "cna@vuldb.com", "url": "https://github.com/Dolibarr/dolibarr/releases/tag/23.0.4"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/cve/CVE-2026-85401"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/894869"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/398543"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/398543/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-266"}, {"lang": "en", "value": "CWE-284"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "21.0.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "21.0.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "21.0.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "21.0.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "21.0.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "22.0.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "22.0.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "22.0.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "22.0.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "22.0.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "22.0.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "23.0.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "23.0.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "23.0.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "23.0.3"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "23.0.4"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Dolibarr", "source": "cna", "vendor": "n/a"}, "product": "dolibarr", "vendor": "dolibarr"}], "created": "2026-09-04T05:00:05.965815+00:00", "updated": "2026-09-04T05:30:13.614437+00:00", "vendors": ["dolibarr", "dolibarr$PRODUCT$dolibarr"]}