CVE-2026-89013: Dolibarr < 24.0.0 - Authorization Bypass via hashp Parameter
HoneyLabs honeypots recorded 5 probes matching CVE-2026-89013 from 5 distinct source IP addresses in the last 7 days. Severity is rated high.
What the sensors show
Probes arrived on 3 of the 7 days in this window. The busiest day was 2026-11-08, with 3. No single address sent more than 20% of them. Over the last 90 days the sensors recorded 147 probes for it. Every probing client that negotiated TLS presented one JA4 fingerprint, t13d1312h2_a44d0ee8b3cc_e381dae6da6b.
Request paths that identify it
- /document.php
Addresses probing it
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 104.22.160.11 | 1 | Cloudflare, Inc. | United States |
| 104.22.72.15 | 1 | Cloudflare, Inc. | United States |
| 104.22.72.16 | 1 | Cloudflare, Inc. | United States |
| 172.69.130.213 | 1 | Cloudflare, Inc. | Canada |
| 172.71.222.111 | 1 | Cloudflare, Inc. | United States |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS13335 | Cloudflare, Inc. | 5 | 5 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 4 |
| Canada | 1 |
Captured requests
- /document.php?modulepart=systemtools&file=../conf/conf.php&hashp=shared
HTTP client fingerprints
- b11cun126_80040017_97192874_x379753ab95539f8fdafedf99
- b11cun239_80040017_352ed265_x379753ab713d8e1291de95539f8fb08…
CVE report
Open a specific CVE from the CVE tracker.