CVE-2026-69135

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.

Suitecrm

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.2 and 8.10.2, the Project module interpolates the authenticated caller's duplicateId POST parameter directly into a SQL query without sanitization, quoting, or parameterization. An authenticated attacker can alter query structure and disclose sensitive database information. This issue is fixed in versions 7.15.2 and 8.10.2.

5. Nov 2026

Ausgewertete Quellen

• NVD
  CVE-2026-69135
• GitHub
  https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-gcc4-hvpc-cgvv