CVE-2026-63111

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.

Suitecrm

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.2 and 8.10.2, the V8 module API lacks module-level authorization and permits a low-privileged user to create SchedulersJobs records with attacker-controlled target values. The affected flow begins at /Api/V8/module and uses SchedulersJobs, target, cron.php, and url:: to carry attacker-controlled data or authorization state into the security-sensitive…

5. Nov 2026

Ausgewertete Quellen

• NVD
  CVE-2026-63111
• GitHub
  https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-gx3x-3f4c-cjmx