CVE-2026-34036CVE-2026-34036 — When your CRM's autocomplete reads more than it should
CVE-2026-34036: an authenticated LFI in Dolibarr ≤ 22.0.4 that turns the selectobject.php autocomplete endpoint into an arbitrary file reader.
CVE-2026-34036CVE-2026-34036: an authenticated LFI in Dolibarr ≤ 22.0.4 that turns the selectobject.php autocomplete endpoint into an arbitrary file reader.