Cvedetails

New Vulnerabilities Identified in Dolibarr ERP and Janet Systems

First seen 22 Feb 2026, 18:09 UTC • Cvedetails

+3 •57.3

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

CVE-2019-25452, a SQL injection vulnerability in Dolibarr ERP/CRM 10.0.1, has been published with a CVSS score of 8.2, indicating high severity. Additionally, CVE-2026-2869, affecting the janet system, has been reported with a low severity score of 1.7. Both vulnerabilities were published in February 2026.

How this analysis works

Timeline

2026-02-21

CVE-2026-2869 published

2026-02-22

CVE-2019-25452 published

Attack Flow

13 entities, 33 inferred relationships (STIX 2.1).

Technique (1)

Sql Injection

Vulnerability (7)

CVE-2019-25442
CVE-2019-25452
CVE-2026-2869
CVE-2026-2889
CVE-2026-2940
CVE-2026-2954
CVE-2026-2965

Affected Platform (5)

07fly
07flycms
Dolibarr Erp/crm
Dromara Ujcms
Janet

Relationships

CVE-2019-25442 targets 07fly
CVE-2019-25442 targets 07flycms
CVE-2019-25442 targets Dolibarr Erp/crm
CVE-2019-25442 targets Dromara Ujcms
CVE-2019-25452 targets 07fly
CVE-2019-25452 targets 07flycms
CVE-2019-25452 targets Dolibarr Erp/crm
CVE-2019-25452 targets Dromara Ujcms
CVE-2026-2869 targets 07fly
CVE-2026-2869 targets 07flycms
CVE-2026-2869 targets Dolibarr Erp/crm
CVE-2026-2869 targets Dromara Ujcms
CVE-2026-2889 targets 07fly
CVE-2026-2889 targets 07flycms
CVE-2026-2889 targets Dolibarr Erp/crm
CVE-2026-2889 targets Dromara Ujcms
CVE-2026-2940 targets 07fly
CVE-2026-2940 targets 07flycms
CVE-2026-2940 targets Dolibarr Erp/crm
CVE-2026-2940 targets Dromara Ujcms
CVE-2026-2954 targets 07fly
CVE-2026-2954 targets 07flycms
CVE-2026-2954 targets Dolibarr Erp/crm
CVE-2026-2954 targets Dromara Ujcms
CVE-2026-2965 targets 07fly
CVE-2026-2965 targets 07flycms
CVE-2026-2965 targets Dolibarr Erp/crm
CVE-2026-2965 targets Dromara Ujcms
Sql Injection targets 07fly
Sql Injection targets 07flycms
Sql Injection targets Dolibarr Erp/crm
Sql Injection targets Dromara Ujcms
CVE-2019-25442 related to Janet

Continue Reading

Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation Critical SQL Injection Vulnerability in NocoBase (CVE-2026-52887) SAP Releases January 2026 Security Patches for Critical Vulnerabilities Critical SQL Injection Vulnerability in Drupal Core Actively Exploited Critical SQL Injection Vulnerability in GPTranslate Plugin (CVE-2026-49776) Head Mare Hackers Exploit TrueConf Vulnerabilities to Deploy Backdoors

New Vulnerabilities Identified in Dolibarr ERP and Janet Systems

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading