{
    "document": {
        "category": "csaf_base",
        "csaf_version": "2.0",
        "distribution": {
            "tlp": {
                "label": "WHITE"
            }
        },
        "lang": "en",
        "notes": [
            {
                "category": "legal_disclaimer",
                "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
            }
        ],
        "publisher": {
            "category": "coordinator",
            "contact_details": "cert@ncsc.nl",
            "name": "National Cyber Security Centre",
            "namespace": "https://www.ncsc.nl/"
        },
        "title": "CVE-2026-10215",
        "tracking": {
            "current_release_date": "2026-09-06T14:51:15.288504Z",
            "generator": {
                "date": "2026-02-17T15:00:00Z",
                "engine": {
                    "name": "V.E.L.M.A",
                    "version": "1.7"
                }
            },
            "id": "CVE-2026-10215",
            "initial_release_date": "2026-05-31T11:35:27.824837Z",
            "revision_history": [
                {
                    "date": "2026-05-31T11:35:27.824837Z",
                    "number": "1",
                    "summary": "NCSC Score created."
                },
                {
                    "date": "2026-06-01T02:38:37.646487Z",
                    "number": "2",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (3).| Product Identifiers created (3).| Exploits created (1).| References created (8).| CWES updated (1)."
                },
                {
                    "date": "2026-06-01T02:38:48.879710Z",
                    "number": "3",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-06-01T03:25:11.174155Z",
                    "number": "4",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (9).| CWES updated (1)."
                },
                {
                    "date": "2026-06-01T03:25:15.367507Z",
                    "number": "5",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-06-01T18:45:55.533085Z",
                    "number": "6",
                    "summary": "Source connected.| CVE status created. (valid)| EPSS created."
                },
                {
                    "date": "2026-06-03T23:23:38.301417Z",
                    "number": "7",
                    "summary": "Unknown change."
                },
                {
                    "date": "2026-06-03T23:23:42.719457Z",
                    "number": "8",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-06-15T18:00:54.592942Z",
                    "number": "9",
                    "summary": "EPSS updated."
                },
                {
                    "date": "2026-06-15T18:00:57.359290Z",
                    "number": "10",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-07-08T00:30:45.975834Z",
                    "number": "11",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (113).| Product Identifiers created (112).| References created (10).| CWES updated (1)."
                },
                {
                    "date": "2026-07-08T00:31:03.749987Z",
                    "number": "12",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-07-10T15:42:41.381033Z",
                    "number": "13",
                    "summary": "Source connected.| CVE status created. (valid)| EPSS created."
                },
                {
                    "date": "2026-07-10T15:42:42.929165Z",
                    "number": "14",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-07-13T02:52:03.018022Z",
                    "number": "15",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (2).| References created (11).| CWES updated (1)."
                },
                {
                    "date": "2026-07-13T02:52:05.594807Z",
                    "number": "16",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-08-11T15:12:00.264838Z",
                    "number": "17",
                    "summary": "Source connected.| CVE status created. (valid)| EPSS created."
                },
                {
                    "date": "2026-08-11T15:12:01.761043Z",
                    "number": "18",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-09-02T10:45:52.512429Z",
                    "number": "19",
                    "summary": "EPSS updated."
                },
                {
                    "date": "2026-09-02T23:34:37.272659Z",
                    "number": "20",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-09-03T14:38:26.292662Z",
                    "number": "21",
                    "summary": "EPSS updated."
                },
                {
                    "date": "2026-09-03T19:01:49.785254Z",
                    "number": "22",
                    "summary": "EPSS updated."
                },
                {
                    "date": "2026-09-04T15:47:49.244424Z",
                    "number": "23",
                    "summary": "EPSS updated."
                },
                {
                    "date": "2026-09-04T15:47:50.418526Z",
                    "number": "24",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-09-05T15:45:41.758943Z",
                    "number": "25",
                    "summary": "EPSS updated."
                }
            ],
            "status": "interim",
            "version": "25"
        }
    },
    "product_tree": {
        "branches": [
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/23.0.0",
                                "product": {
                                    "name": "vers:unknown/23.0.0",
                                    "product_id": "CSAFPID-8711645"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/23.0.1",
                                "product": {
                                    "name": "vers:unknown/23.0.1",
                                    "product_id": "CSAFPID-8711646"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Dolibarr"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/23.0.0",
                                "product": {
                                    "name": "vers:unknown/23.0.0",
                                    "product_id": "CSAFPID-6005859",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:dolibarr:erp_crm:*:*:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/23.0.1",
                                "product": {
                                    "name": "vers:unknown/23.0.1",
                                    "product_id": "CSAFPID-6005860",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:dolibarr:erp_crm:*:*:*:*:*:*:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/23.0.2",
                                "product": {
                                    "name": "vers:unknown/23.0.2",
                                    "product_id": "CSAFPID-6455623",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:dolibarr:erp_crm:*:*:*:*:*:*:*:*"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "ERP CRM"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.0",
                                "product": {
                                    "name": "vers:unknown/10.0.0",
                                    "product_id": "CSAFPID-4850632",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@10.0.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.1",
                                "product": {
                                    "name": "vers:unknown/10.0.1",
                                    "product_id": "CSAFPID-4850633",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@10.0.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.2",
                                "product": {
                                    "name": "vers:unknown/10.0.2",
                                    "product_id": "CSAFPID-4850634",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@10.0.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.3",
                                "product": {
                                    "name": "vers:unknown/10.0.3",
                                    "product_id": "CSAFPID-4850635",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@10.0.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.4",
                                "product": {
                                    "name": "vers:unknown/10.0.4",
                                    "product_id": "CSAFPID-4850636",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@10.0.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.5",
                                "product": {
                                    "name": "vers:unknown/10.0.5",
                                    "product_id": "CSAFPID-4850637",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@10.0.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.6",
                                "product": {
                                    "name": "vers:unknown/10.0.6",
                                    "product_id": "CSAFPID-4850638",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@10.0.6"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.7",
                                "product": {
                                    "name": "vers:unknown/10.0.7",
                                    "product_id": "CSAFPID-4850639",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@10.0.7"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/11.0.0",
                                "product": {
                                    "name": "vers:unknown/11.0.0",
                                    "product_id": "CSAFPID-4850640",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@11.0.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/11.0.1",
                                "product": {
                                    "name": "vers:unknown/11.0.1",
                                    "product_id": "CSAFPID-4850641",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@11.0.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/11.0.2",
                                "product": {
                                    "name": "vers:unknown/11.0.2",
                                    "product_id": "CSAFPID-4850642",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@11.0.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/11.0.3",
                                "product": {
                                    "name": "vers:unknown/11.0.3",
                                    "product_id": "CSAFPID-4850643",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@11.0.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/11.0.4",
                                "product": {
                                    "name": "vers:unknown/11.0.4",
                                    "product_id": "CSAFPID-4850644",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@11.0.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/11.0.5",
                                "product": {
                                    "name": "vers:unknown/11.0.5",
                                    "product_id": "CSAFPID-4862354",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@11.0.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/12.0.0",
                                "product": {
                                    "name": "vers:unknown/12.0.0",
                                    "product_id": "CSAFPID-4862355",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@12.0.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/12.0.1",
                                "product": {
                                    "name": "vers:unknown/12.0.1",
                                    "product_id": "CSAFPID-4862356",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@12.0.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/12.0.2",
                                "product": {
                                    "name": "vers:unknown/12.0.2",
                                    "product_id": "CSAFPID-4862357",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@12.0.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/12.0.3",
                                "product": {
                                    "name": "vers:unknown/12.0.3",
                                    "product_id": "CSAFPID-4862358",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@12.0.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/12.0.4",
                                "product": {
                                    "name": "vers:unknown/12.0.4",
                                    "product_id": "CSAFPID-4862359",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@12.0.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/12.0.5",
                                "product": {
                                    "name": "vers:unknown/12.0.5",
                                    "product_id": "CSAFPID-4862360",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@12.0.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/13.0.0",
                                "product": {
                                    "name": "vers:unknown/13.0.0",
                                    "product_id": "CSAFPID-4862361",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@13.0.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/13.0.1",
                                "product": {
                                    "name": "vers:unknown/13.0.1",
                                    "product_id": "CSAFPID-4862362",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@13.0.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/13.0.2",
                                "product": {
                                    "name": "vers:unknown/13.0.2",
                                    "product_id": "CSAFPID-4862363",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@13.0.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/13.0.3",
                                "product": {
                                    "name": "vers:unknown/13.0.3",
                                    "product_id": "CSAFPID-4862364",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@13.0.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/13.0.4",
                                "product": {
                                    "name": "vers:unknown/13.0.4",
                                    "product_id": "CSAFPID-4862365",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@13.0.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/13.0.5",
                                "product": {
                                    "name": "vers:unknown/13.0.5",
                                    "product_id": "CSAFPID-4862366",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@13.0.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/14.0.0",
                                "product": {
                                    "name": "vers:unknown/14.0.0",
                                    "product_id": "CSAFPID-4904172",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@14.0.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/14.0.1",
                                "product": {
                                    "name": "vers:unknown/14.0.1",
                                    "product_id": "CSAFPID-4921338",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@14.0.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/14.0.2",
                                "product": {
                                    "name": "vers:unknown/14.0.2",
                                    "product_id": "CSAFPID-4921339",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@14.0.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/14.0.3",
                                "product": {
                                    "name": "vers:unknown/14.0.3",
                                    "product_id": "CSAFPID-4921340",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@14.0.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/14.0.4",
                                "product": {
                                    "name": "vers:unknown/14.0.4",
                                    "product_id": "CSAFPID-4921341",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@14.0.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/14.0.5",
                                "product": {
                                    "name": "vers:unknown/14.0.5",
                                    "product_id": "CSAFPID-4921342",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@14.0.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/15.0.0",
                                "product": {
                                    "name": "vers:unknown/15.0.0",
                                    "product_id": "CSAFPID-4921343",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@15.0.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/15.0.1",
                                "product": {
                                    "name": "vers:unknown/15.0.1",
                                    "product_id": "CSAFPID-4921344",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@15.0.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/15.0.2",
                                "product": {
                                    "name": "vers:unknown/15.0.2",
                                    "product_id": "CSAFPID-4921345",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@15.0.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/15.0.3",
                                "product": {
                                    "name": "vers:unknown/15.0.3",
                                    "product_id": "CSAFPID-4921346",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@15.0.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.6.0",
                                "product": {
                                    "name": "vers:unknown/3.6.0",
                                    "product_id": "CSAFPID-4850645",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.6.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.6.0-beta",
                                "product": {
                                    "name": "vers:unknown/3.6.0-beta",
                                    "product_id": "CSAFPID-4850646",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.6.0-beta"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.6.1",
                                "product": {
                                    "name": "vers:unknown/3.6.1",
                                    "product_id": "CSAFPID-4850647",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.6.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.6.2",
                                "product": {
                                    "name": "vers:unknown/3.6.2",
                                    "product_id": "CSAFPID-4850648",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.6.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.6.3",
                                "product": {
                                    "name": "vers:unknown/3.6.3",
                                    "product_id": "CSAFPID-4850649",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.6.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.6.4",
                                "product": {
                                    "name": "vers:unknown/3.6.4",
                                    "product_id": "CSAFPID-4850650",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.6.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.6.5",
                                "product": {
                                    "name": "vers:unknown/3.6.5",
                                    "product_id": "CSAFPID-4850651",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.6.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.6.6",
                                "product": {
                                    "name": "vers:unknown/3.6.6",
                                    "product_id": "CSAFPID-4850652",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.6.6"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.7.0",
                                "product": {
                                    "name": "vers:unknown/3.7.0",
                                    "product_id": "CSAFPID-4850653",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.7.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.7.1",
                                "product": {
                                    "name": "vers:unknown/3.7.1",
                                    "product_id": "CSAFPID-4850654",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.7.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.7.2",
                                "product": {
                                    "name": "vers:unknown/3.7.2",
                                    "product_id": "CSAFPID-4850655",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.7.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.7.3",
                                "product": {
                                    "name": "vers:unknown/3.7.3",
                                    "product_id": "CSAFPID-4850656",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.7.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.7.4",
                                "product": {
                                    "name": "vers:unknown/3.7.4",
                                    "product_id": "CSAFPID-4850657",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.7.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.8.0",
                                "product": {
                                    "name": "vers:unknown/3.8.0",
                                    "product_id": "CSAFPID-4850658",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.8.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.8.0-beta",
                                "product": {
                                    "name": "vers:unknown/3.8.0-beta",
                                    "product_id": "CSAFPID-4850659",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.8.0-beta"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.8.1",
                                "product": {
                                    "name": "vers:unknown/3.8.1",
                                    "product_id": "CSAFPID-4850660",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.8.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.8.2",
                                "product": {
                                    "name": "vers:unknown/3.8.2",
                                    "product_id": "CSAFPID-4850661",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.8.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.8.3",
                                "product": {
                                    "name": "vers:unknown/3.8.3",
                                    "product_id": "CSAFPID-4850662",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.8.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.8.4",
                                "product": {
                                    "name": "vers:unknown/3.8.4",
                                    "product_id": "CSAFPID-4850663",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.8.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.9.0",
                                "product": {
                                    "name": "vers:unknown/3.9.0",
                                    "product_id": "CSAFPID-4850664",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.9.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.9.0-rc",
                                "product": {
                                    "name": "vers:unknown/3.9.0-rc",
                                    "product_id": "CSAFPID-4850665",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.9.0-rc"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.9.0-rc2",
                                "product": {
                                    "name": "vers:unknown/3.9.0-rc2",
                                    "product_id": "CSAFPID-4850666",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.9.0-rc2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.9.1",
                                "product": {
                                    "name": "vers:unknown/3.9.1",
                                    "product_id": "CSAFPID-4850667",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.9.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.9.2",
                                "product": {
                                    "name": "vers:unknown/3.9.2",
                                    "product_id": "CSAFPID-4850668",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.9.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.9.3",
                                "product": {
                                    "name": "vers:unknown/3.9.3",
                                    "product_id": "CSAFPID-4850669",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.9.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.9.4",
                                "product": {
                                    "name": "vers:unknown/3.9.4",
                                    "product_id": "CSAFPID-4850670",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@3.9.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.0.0",
                                "product": {
                                    "name": "vers:unknown/4.0.0",
                                    "product_id": "CSAFPID-4850671",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@4.0.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.0.0-beta",
                                "product": {
                                    "name": "vers:unknown/4.0.0-beta",
                                    "product_id": "CSAFPID-4850672",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@4.0.0-beta"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.0.0-rc",
                                "product": {
                                    "name": "vers:unknown/4.0.0-rc",
                                    "product_id": "CSAFPID-4850673",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@4.0.0-rc"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.0.0-rc2",
                                "product": {
                                    "name": "vers:unknown/4.0.0-rc2",
                                    "product_id": "CSAFPID-4850674",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@4.0.0-rc2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.0.1",
                                "product": {
                                    "name": "vers:unknown/4.0.1",
                                    "product_id": "CSAFPID-4850675",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@4.0.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.0.2",
                                "product": {
                                    "name": "vers:unknown/4.0.2",
                                    "product_id": "CSAFPID-4850676",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@4.0.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.0.3",
                                "product": {
                                    "name": "vers:unknown/4.0.3",
                                    "product_id": "CSAFPID-4850677",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@4.0.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.0.4",
                                "product": {
                                    "name": "vers:unknown/4.0.4",
                                    "product_id": "CSAFPID-4850678",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@4.0.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.0.5",
                                "product": {
                                    "name": "vers:unknown/4.0.5",
                                    "product_id": "CSAFPID-4850679",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@4.0.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.0.6",
                                "product": {
                                    "name": "vers:unknown/4.0.6",
                                    "product_id": "CSAFPID-4850680",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@4.0.6"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.0.0",
                                "product": {
                                    "name": "vers:unknown/5.0.0",
                                    "product_id": "CSAFPID-4850681",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@5.0.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.0.0-beta",
                                "product": {
                                    "name": "vers:unknown/5.0.0-beta",
                                    "product_id": "CSAFPID-4850682",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@5.0.0-beta"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.0.0-rc1",
                                "product": {
                                    "name": "vers:unknown/5.0.0-rc1",
                                    "product_id": "CSAFPID-4850683",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@5.0.0-rc1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.0.0-rc2",
                                "product": {
                                    "name": "vers:unknown/5.0.0-rc2",
                                    "product_id": "CSAFPID-4850684",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@5.0.0-rc2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.0.1",
                                "product": {
                                    "name": "vers:unknown/5.0.1",
                                    "product_id": "CSAFPID-4850685",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@5.0.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.0.2",
                                "product": {
                                    "name": "vers:unknown/5.0.2",
                                    "product_id": "CSAFPID-4850686",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@5.0.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.0.3",
                                "product": {
                                    "name": "vers:unknown/5.0.3",
                                    "product_id": "CSAFPID-4850687",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@5.0.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.0.4",
                                "product": {
                                    "name": "vers:unknown/5.0.4",
                                    "product_id": "CSAFPID-4850688",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@5.0.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.0.5",
                                "product": {
                                    "name": "vers:unknown/5.0.5",
                                    "product_id": "CSAFPID-4850689",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@5.0.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.0.6",
                                "product": {
                                    "name": "vers:unknown/5.0.6",
                                    "product_id": "CSAFPID-4850690",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@5.0.6"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.0.7",
                                "product": {
                                    "name": "vers:unknown/5.0.7",
                                    "product_id": "CSAFPID-4850691",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@5.0.7"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.0.0",
                                "product": {
                                    "name": "vers:unknown/6.0.0",
                                    "product_id": "CSAFPID-4850692",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@6.0.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.0.0-beta",
                                "product": {
                                    "name": "vers:unknown/6.0.0-beta",
                                    "product_id": "CSAFPID-4850693",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@6.0.0-beta"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.0.0-rc",
                                "product": {
                                    "name": "vers:unknown/6.0.0-rc",
                                    "product_id": "CSAFPID-4850694",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@6.0.0-rc"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.0.1",
                                "product": {
                                    "name": "vers:unknown/6.0.1",
                                    "product_id": "CSAFPID-4850695",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@6.0.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.0.2",
                                "product": {
                                    "name": "vers:unknown/6.0.2",
                                    "product_id": "CSAFPID-4850696",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@6.0.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.0.3",
                                "product": {
                                    "name": "vers:unknown/6.0.3",
                                    "product_id": "CSAFPID-4850697",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@6.0.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.0.4",
                                "product": {
                                    "name": "vers:unknown/6.0.4",
                                    "product_id": "CSAFPID-4850698",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@6.0.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.0.5",
                                "product": {
                                    "name": "vers:unknown/6.0.5",
                                    "product_id": "CSAFPID-4850699",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@6.0.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.0.6",
                                "product": {
                                    "name": "vers:unknown/6.0.6",
                                    "product_id": "CSAFPID-4850700",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@6.0.6"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.0.7",
                                "product": {
                                    "name": "vers:unknown/6.0.7",
                                    "product_id": "CSAFPID-4850701",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@6.0.7"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.0.8",
                                "product": {
                                    "name": "vers:unknown/6.0.8",
                                    "product_id": "CSAFPID-4850702",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@6.0.8"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/7.0.0",
                                "product": {
                                    "name": "vers:unknown/7.0.0",
                                    "product_id": "CSAFPID-4850703",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@7.0.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/7.0.1",
                                "product": {
                                    "name": "vers:unknown/7.0.1",
                                    "product_id": "CSAFPID-4850704",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@7.0.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/7.0.2",
                                "product": {
                                    "name": "vers:unknown/7.0.2",
                                    "product_id": "CSAFPID-4850705",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@7.0.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/7.0.3",
                                "product": {
                                    "name": "vers:unknown/7.0.3",
                                    "product_id": "CSAFPID-4850706",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@7.0.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/7.0.4",
                                "product": {
                                    "name": "vers:unknown/7.0.4",
                                    "product_id": "CSAFPID-4850707",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@7.0.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/7.0.5",
                                "product": {
                                    "name": "vers:unknown/7.0.5",
                                    "product_id": "CSAFPID-4850708",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@7.0.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.0",
                                "product": {
                                    "name": "vers:unknown/8.0.0",
                                    "product_id": "CSAFPID-4850709",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@8.0.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.1",
                                "product": {
                                    "name": "vers:unknown/8.0.1",
                                    "product_id": "CSAFPID-4850710",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@8.0.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.2",
                                "product": {
                                    "name": "vers:unknown/8.0.2",
                                    "product_id": "CSAFPID-4850711",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@8.0.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.3",
                                "product": {
                                    "name": "vers:unknown/8.0.3",
                                    "product_id": "CSAFPID-4850712",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@8.0.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.4",
                                "product": {
                                    "name": "vers:unknown/8.0.4",
                                    "product_id": "CSAFPID-4850713",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@8.0.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.5",
                                "product": {
                                    "name": "vers:unknown/8.0.5",
                                    "product_id": "CSAFPID-4850714",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@8.0.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.6",
                                "product": {
                                    "name": "vers:unknown/8.0.6",
                                    "product_id": "CSAFPID-4850715",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@8.0.6"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.0",
                                "product": {
                                    "name": "vers:unknown/9.0.0",
                                    "product_id": "CSAFPID-4850716",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@9.0.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.1",
                                "product": {
                                    "name": "vers:unknown/9.0.1",
                                    "product_id": "CSAFPID-4850717",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@9.0.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.2",
                                "product": {
                                    "name": "vers:unknown/9.0.2",
                                    "product_id": "CSAFPID-4850718",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@9.0.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.3",
                                "product": {
                                    "name": "vers:unknown/9.0.3",
                                    "product_id": "CSAFPID-4850719",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@9.0.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.4",
                                "product": {
                                    "name": "vers:unknown/9.0.4",
                                    "product_id": "CSAFPID-4850720",
                                    "product_identification_helper": {
                                        "purl": "pkg:composer/dolibarr/dolibarr@9.0.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/>=0|<=15.0.3",
                                "product": {
                                    "name": "vers:unknown/>=0|<=15.0.3",
                                    "product_id": "CSAFPID-4981186"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "dolibarr"
                    }
                ],
                "category": "vendor",
                "name": "Dolibarr"
            }
        ]
    },
    "vulnerabilities": [
        {
            "cve": "CVE-2026-10215",
            "cwe": {
                "id": "CWE-266",
                "name": "Incorrect Privilege Assignment"
            },
            "notes": [
                {
                    "category": "description",
                    "text": "A security vulnerability has been detected in Dolibarr ERP CRM up to 23.0.1. Impacted is the function checkUserAccessToObject of the file htdocs/holiday/class/api_holidays.class.php of the component Leave Request REST API. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 23.0.2 is recommended to address this issue. The identifier of the patch is ee93b6f2f9dd0f6aeefe9d718ab3ab0a44326b73. Upgrading the affected component is advised.",
                    "title": "nvd - https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-10215"
                },
                {
                    "category": "description",
                    "text": "A security vulnerability has been detected in Dolibarr ERP CRM up to 23.0.1. Impacted is the function checkUserAccessToObject of the file htdocs/holiday/class/api_holidays.class.php of the component Leave Request REST API. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 23.0.2 is recommended to address this issue. The identifier of the patch is ee93b6f2f9dd0f6aeefe9d718ab3ab0a44326b73. Upgrading the affected component is advised.",
                    "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Packagist%2FGHSA-7fg5-vc77-69fp.json?alt=media"
                },
                {
                    "category": "description",
                    "text": "A security vulnerability has been detected in Dolibarr ERP CRM up to 23.0.1. Impacted is the function checkUserAccessToObject of the file htdocs/holiday/class/api_holidays.class.php of the component Leave Request REST API. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 23.0.2 is recommended to address this issue. The identifier of the patch is ee93b6f2f9dd0f6aeefe9d718ab3ab0a44326b73. Upgrading the affected component is advised.",
                    "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-10215.json?alt=media"
                },
                {
                    "category": "description",
                    "text": "A security vulnerability has been detected in Dolibarr ERP CRM up to 23.0.1. Impacted is the function checkUserAccessToObject of the file htdocs/holiday/class/api_holidays.class.php of the component Leave Request REST API. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 23.0.2 is recommended to address this issue. The identifier of the patch is ee93b6f2f9dd0f6aeefe9d718ab3ab0a44326b73. Upgrading the affected component is advised.",
                    "title": "cveprojectv5 - https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/10xxx/CVE-2026-10215.json"
                },
                {
                    "category": "other",
                    "text": "0.00259",
                    "title": "EPSS"
                },
                {
                    "category": "other",
                    "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
                    "title": "CVSSV4"
                },
                {
                    "category": "other",
                    "text": "2.1",
                    "title": "CVSSV4 base score"
                },
                {
                    "category": "other",
                    "text": "3.2",
                    "title": "NCSC Score"
                },
                {
                    "category": "other",
                    "text": "Is related to (a version of) an uncommon product, Exploit code publicly available, There is exploit data available from source Cveprojectv5, The value of the most recent CVSS (V3) score, There is cwe data available from source Nvd",
                    "title": "NCSC Score top decreasing factors"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-6005859",
                    "CSAFPID-6005860",
                    "CSAFPID-4850632",
                    "CSAFPID-4850633",
                    "CSAFPID-4850634",
                    "CSAFPID-4850635",
                    "CSAFPID-4850636",
                    "CSAFPID-4850637",
                    "CSAFPID-4850638",
                    "CSAFPID-4850639",
                    "CSAFPID-4850640",
                    "CSAFPID-4850641",
                    "CSAFPID-4850642",
                    "CSAFPID-4850643",
                    "CSAFPID-4850644",
                    "CSAFPID-4850645",
                    "CSAFPID-4850646",
                    "CSAFPID-4850647",
                    "CSAFPID-4850648",
                    "CSAFPID-4850649",
                    "CSAFPID-4850650",
                    "CSAFPID-4850651",
                    "CSAFPID-4850652",
                    "CSAFPID-4850653",
                    "CSAFPID-4850654",
                    "CSAFPID-4850655",
                    "CSAFPID-4850656",
                    "CSAFPID-4850657",
                    "CSAFPID-4850658",
                    "CSAFPID-4850659",
                    "CSAFPID-4850660",
                    "CSAFPID-4850661",
                    "CSAFPID-4850662",
                    "CSAFPID-4850663",
                    "CSAFPID-4850664",
                    "CSAFPID-4850665",
                    "CSAFPID-4850666",
                    "CSAFPID-4850667",
                    "CSAFPID-4850668",
                    "CSAFPID-4850669",
                    "CSAFPID-4850670",
                    "CSAFPID-4850671",
                    "CSAFPID-4850672",
                    "CSAFPID-4850673",
                    "CSAFPID-4850674",
                    "CSAFPID-4850675",
                    "CSAFPID-4850676",
                    "CSAFPID-4850677",
                    "CSAFPID-4850678",
                    "CSAFPID-4850679",
                    "CSAFPID-4850680",
                    "CSAFPID-4850681",
                    "CSAFPID-4850682",
                    "CSAFPID-4850683",
                    "CSAFPID-4850684",
                    "CSAFPID-4850685",
                    "CSAFPID-4850686",
                    "CSAFPID-4850687",
                    "CSAFPID-4850688",
                    "CSAFPID-4850689",
                    "CSAFPID-4850690",
                    "CSAFPID-4850691",
                    "CSAFPID-4850692",
                    "CSAFPID-4850693",
                    "CSAFPID-4850694",
                    "CSAFPID-4850695",
                    "CSAFPID-4850696",
                    "CSAFPID-4850697",
                    "CSAFPID-4850698",
                    "CSAFPID-4850699",
                    "CSAFPID-4850700",
                    "CSAFPID-4850701",
                    "CSAFPID-4850702",
                    "CSAFPID-4850703",
                    "CSAFPID-4850704",
                    "CSAFPID-4850705",
                    "CSAFPID-4850706",
                    "CSAFPID-4850707",
                    "CSAFPID-4850708",
                    "CSAFPID-4850709",
                    "CSAFPID-4850710",
                    "CSAFPID-4850711",
                    "CSAFPID-4850712",
                    "CSAFPID-4850713",
                    "CSAFPID-4850714",
                    "CSAFPID-4850715",
                    "CSAFPID-4850716",
                    "CSAFPID-4850717",
                    "CSAFPID-4850718",
                    "CSAFPID-4850719",
                    "CSAFPID-4850720",
                    "CSAFPID-4862354",
                    "CSAFPID-4862355",
                    "CSAFPID-4862356",
                    "CSAFPID-4862357",
                    "CSAFPID-4862358",
                    "CSAFPID-4862359",
                    "CSAFPID-4862360",
                    "CSAFPID-4862361",
                    "CSAFPID-4862362",
                    "CSAFPID-4862363",
                    "CSAFPID-4862364",
                    "CSAFPID-4862365",
                    "CSAFPID-4862366",
                    "CSAFPID-4904172",
                    "CSAFPID-4921338",
                    "CSAFPID-4921339",
                    "CSAFPID-4921340",
                    "CSAFPID-4921341",
                    "CSAFPID-4921342",
                    "CSAFPID-4921343",
                    "CSAFPID-4921344",
                    "CSAFPID-4921345",
                    "CSAFPID-4921346",
                    "CSAFPID-4981186",
                    "CSAFPID-8711645",
                    "CSAFPID-8711646"
                ],
                "known_not_affected": [
                    "CSAFPID-6455623"
                ]
            },
            "references": [
                {
                    "category": "external",
                    "summary": "Source - first",
                    "url": "https://api.first.org/data/v1/epss"
                },
                {
                    "category": "external",
                    "summary": "Source - nvd",
                    "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-10215"
                },
                {
                    "category": "external",
                    "summary": "Source - cveprojectv5",
                    "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/10xxx/CVE-2026-10215.json"
                },
                {
                    "category": "external",
                    "summary": "Source - osv",
                    "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Packagist%2FGHSA-7fg5-vc77-69fp.json?alt=media"
                },
                {
                    "category": "external",
                    "summary": "Source - osv",
                    "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-10215.json?alt=media"
                },
                {
                    "category": "external",
                    "summary": "Source - ncscclear",
                    "url": "https://vulnerabilities.ncsc.nl/manual/CVE-2026-10215"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; nvd; osv",
                    "url": "https://github.com/Dolibarr/dolibarr/commit/ee93b6f2f9dd0f6aeefe9d718ab3ab0a44326b73"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; nvd; osv",
                    "url": "https://github.com/Dolibarr/dolibarr/issues/37752"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; nvd; osv",
                    "url": "https://github.com/Dolibarr/dolibarr/issues/37752#issuecomment-4304055921"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; nvd; osv",
                    "url": "https://github.com/Dolibarr/dolibarr/releases/tag/23.0.2"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; nvd; osv",
                    "url": "https://vuldb.com/cve/CVE-2026-10215"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; nvd; osv",
                    "url": "https://vuldb.com/submit/821930"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; nvd; osv",
                    "url": "https://vuldb.com/vuln/367494"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; nvd; osv",
                    "url": "https://vuldb.com/vuln/367494/cti"
                },
                {
                    "category": "external",
                    "summary": "Reference - nvd; osv",
                    "url": "https://github.com/user-attachments/files/26487388/2_Dolibarr_Leave_Request_API_Horizontal_Unauthorized_Read_en.pdf"
                },
                {
                    "category": "external",
                    "summary": "Reference - osv",
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10215"
                },
                {
                    "category": "external",
                    "summary": "Reference - osv",
                    "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/10xxx/CVE-2026-10215.json"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
                        "baseScore": 4.3,
                        "baseSeverity": "MEDIUM"
                    },
                    "products": [
                        "CSAFPID-4850632",
                        "CSAFPID-4850633",
                        "CSAFPID-4850634",
                        "CSAFPID-4850635",
                        "CSAFPID-4850636",
                        "CSAFPID-4850637",
                        "CSAFPID-4850638",
                        "CSAFPID-4850639",
                        "CSAFPID-4850640",
                        "CSAFPID-4850641",
                        "CSAFPID-4850642",
                        "CSAFPID-4850643",
                        "CSAFPID-4850644",
                        "CSAFPID-4850645",
                        "CSAFPID-4850646",
                        "CSAFPID-4850647",
                        "CSAFPID-4850648",
                        "CSAFPID-4850649",
                        "CSAFPID-4850650",
                        "CSAFPID-4850651",
                        "CSAFPID-4850652",
                        "CSAFPID-4850653",
                        "CSAFPID-4850654",
                        "CSAFPID-4850655",
                        "CSAFPID-4850656",
                        "CSAFPID-4850657",
                        "CSAFPID-4850658",
                        "CSAFPID-4850659",
                        "CSAFPID-4850660",
                        "CSAFPID-4850661",
                        "CSAFPID-4850662",
                        "CSAFPID-4850663",
                        "CSAFPID-4850664",
                        "CSAFPID-4850665",
                        "CSAFPID-4850666",
                        "CSAFPID-4850667",
                        "CSAFPID-4850668",
                        "CSAFPID-4850669",
                        "CSAFPID-4850670",
                        "CSAFPID-4850671",
                        "CSAFPID-4850672",
                        "CSAFPID-4850673",
                        "CSAFPID-4850674",
                        "CSAFPID-4850675",
                        "CSAFPID-4850676",
                        "CSAFPID-4850677",
                        "CSAFPID-4850678",
                        "CSAFPID-4850679",
                        "CSAFPID-4850680",
                        "CSAFPID-4850681",
                        "CSAFPID-4850682",
                        "CSAFPID-4850683",
                        "CSAFPID-4850684",
                        "CSAFPID-4850685",
                        "CSAFPID-4850686",
                        "CSAFPID-4850687",
                        "CSAFPID-4850688",
                        "CSAFPID-4850689",
                        "CSAFPID-4850690",
                        "CSAFPID-4850691",
                        "CSAFPID-4850692",
                        "CSAFPID-4850693",
                        "CSAFPID-4850694",
                        "CSAFPID-4850695",
                        "CSAFPID-4850696",
                        "CSAFPID-4850697",
                        "CSAFPID-4850698",
                        "CSAFPID-4850699",
                        "CSAFPID-4850700",
                        "CSAFPID-4850701",
                        "CSAFPID-4850702",
                        "CSAFPID-4850703",
                        "CSAFPID-4850704",
                        "CSAFPID-4850705",
                        "CSAFPID-4850706",
                        "CSAFPID-4850707",
                        "CSAFPID-4850708",
                        "CSAFPID-4850709",
                        "CSAFPID-4850710",
                        "CSAFPID-4850711",
                        "CSAFPID-4850712",
                        "CSAFPID-4850713",
                        "CSAFPID-4850714",
                        "CSAFPID-4850715",
                        "CSAFPID-4850716",
                        "CSAFPID-4850717",
                        "CSAFPID-4850718",
                        "CSAFPID-4850719",
                        "CSAFPID-4850720",
                        "CSAFPID-4862354",
                        "CSAFPID-4862355",
                        "CSAFPID-4862356",
                        "CSAFPID-4862357",
                        "CSAFPID-4862358",
                        "CSAFPID-4862359",
                        "CSAFPID-4862360",
                        "CSAFPID-4862361",
                        "CSAFPID-4862362",
                        "CSAFPID-4862363",
                        "CSAFPID-4862364",
                        "CSAFPID-4862365",
                        "CSAFPID-4862366",
                        "CSAFPID-4904172",
                        "CSAFPID-4921338",
                        "CSAFPID-4921339",
                        "CSAFPID-4921340",
                        "CSAFPID-4921341",
                        "CSAFPID-4921342",
                        "CSAFPID-4921343",
                        "CSAFPID-4921344",
                        "CSAFPID-4921345",
                        "CSAFPID-4921346",
                        "CSAFPID-4981186",
                        "CSAFPID-6005859",
                        "CSAFPID-6005860",
                        "CSAFPID-8711645",
                        "CSAFPID-8711646"
                    ]
                }
            ],
            "title": "CVE-2026-10215"
        }
    ]
}