CVE-2026-71511CWE-522

CVE-2026-71511

Medium · published August 25, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
34.8
In the wild
Unconfirmed
What it is

Dolibarr before 24.0.0 contains a sensitive data exposure vulnerability in the Members REST API that allows authenticated attackers with member-read rights to retrieve bcrypt password verifiers by querying member endpoints. Attackers can call the individual member or member list endpoints to obtain crypted password verifier fields that are not filtered by the base API serializer or the Members API class, potentially enabling offline password cracking attacks.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
7.1 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00415 · 34.8th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2026-08-25T00:17Z
References (4)
https://codeant.ai/security-research/cve-2026-71511-dolibarr-members-api-exposes-password-hashes · [email protected]https://github.com/Dolibarr/dolibarr/commit/b1691356eb96d962833e5c7325c9e58e6823c78d · [email protected]https://github.com/Dolibarr/dolibarr/releases/tag/24.0.0 · [email protected]https://www.vulncheck.com/advisories/dolibarr-members-rest-api-sensitive-data-exposure-via-member-endpoints · [email protected]
EPSS history
Timeline
  • 26 AUG 08:24Z
    EPSS moved — → 0%
    epss
  • 24 AUG 19:06Z
    Dolibarr < 24.0.0 Members REST API Sensitive Data Exposure via Member Endpoints
    cvelistv5