Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been found in Dolibarr ERP up to 23.0.3. Affected is the function fail of the file htdocs/takepos/invoice.php of the component TakePOS Module. Such manipulation leads to missing authorization. The attack may be performed from remote. The name of the patch is 8992ce8704da947b6abe7b65a6fe59aed736bb81. It is advisable to implement a patch to correct this issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-08 | 1 | Disclosure1 |
| 2026-08-09 | 3 | Disclosure2Patch1 |
CVE-2026-19350 A vulnerability has been found in Dolibarr ERP up to 23.0.3. Affected is the function fail of the file htdocs/takepos/invoice.php of the component TakePOS Module. Suc… https://www.cve.org/CVERecord?id=CVE-2026-19350
Post summary
A straightforward announcement of CVE-2026-19350 discovering a function failure in Dolibarr ERP's TakePOS module, without providing PoC, exploit details, or mitigation information.
🚨*CVE* CVE-2026-19350 A vulnerability has been found in Dolibarr ERP up to 23.0.3. Affected is the function fail of the file htdocs/takepos/invoice.php of the component TakePOS Module. Suc… https://www.cve.org/CVERecord?id=CVE-2026-19350 ----- Traducción: CVE-2026-19350 Se … http://infoflow.cloud`
Post summary
CVE‑2026‑19350 is a newly disclosed flaw affecting Dolibarr ERP’s TakePOS module (versions up to 23.0.3) with no PoC, exploit, or patch information provided.
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-19350](https://github.com/Dolibarr/dolibarr/commit/8992ce8704da947b6abe7b65a6fe59aed736... https://github.com/Dolibarr/dolibarr/commit/8992ce8704da947b6abe7b65a6fe59aed736bb81 #PatchManagement #Vulnerability #CVE
Post summary
The tweet announces CVE-2026-19350 and links to a GitHub commit that likely contains a patch, with no exploit code or technical details included, indicating the vulnerability has been addressed.
🧾 Dolibarr ERP authorization flaw disclosed CVE-2026-19350 affects Dolibarr ERP through 23.0.3. The issue occurs in the TakePOS invoice functionality, where insufficient authorization checks may allow operations that should be restricted. 📅 Disclosed: August 8. 🔎 Source: CVE/Vulnerability feed via YANAC. #Dolibarr #ERP #CVE #CyberSecurity #AccessControl
Post summary
A new authorization flaw (CVE-2026-19350) affecting Dolibarr ERP up to version 23.0.3 has been disclosed, impacting restricted operations in the TakePOS invoice functionality due to insufficient checks. No PoC, exploit, patch, or active exploitation information is provided.