DeutschShown in its original language — a full translation is planned for a future version.
SuiteCRM: Mehrere Schwachstellen
view advisory published 2026-03-18
Ein Angreifer kann mehrere Schwachstellen in SuiteCRM ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, Server-Side Request Forgery durchzuführen, Phishing-Angriffe zu starten oder einen Denial-of-Service-Zustand herbeizuführen.
01
describes (18)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-33289US | critical9.8 | — | ||
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, an LDAP Injection vulnerability exists… | ||||
| CVE-2026-33288US | — | — | ||
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, a SQL Injection vulnerability exists i… | ||||
| CVE-2026-32697US | — | — | ||
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 8.9.3, the `RecordHandler::getRecord()` method retrieves… | ||||
| CVE-2026-29189US | — | — | ||
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, the SuiteCRM REST API V8 has missing A… | ||||
| CVE-2026-29109US | high7.2 | — | ||
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions up to and including 8.9.2 contain an unsafe deserialization vulne… | ||||
| CVE-2026-29108US | — | — | ||
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 8.9.3, an authenticated API endpoint allows any user to… | ||||
| CVE-2026-29107US | medium5.3 | — | ||
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, it is possible to create PDF templates… | ||||
| CVE-2026-29106US | medium6.1 | — | ||
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, the value of the return_id request par… | ||||
| CVE-2026-29105US | medium6.1 | — | ||
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, SuiteCRM contains an unauthenticated o… | ||||
| CVE-2026-29104US | low2.7 | — | ||
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, SuiteCRM contains an authenticated arb… | ||||
| CVE-2026-29103US | high7.2 | — | ||
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. A Critical Remote Code Execution (RCE) vulnerability exists in SuiteCRM 7.… | ||||
| CVE-2026-29102US | high8.8 | — | ||
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, an Authenticated Remote Code Execution… | ||||
| CVE-2026-29101US | high7.5 | — | ||
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, a Denial-of-Service (DoS) vulnerabilit… | ||||
| CVE-2026-29100US | medium6.1 | — | ||
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. SuiteCRM 7.15.0 contains a reflected HTML injection vulnerability in the l… | ||||
| CVE-2026-29099US | — | — | ||
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, the `retrieve()` function in `include/… | ||||
| CVE-2026-29098US | — | — | ||
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, the `action_exportCustom` function in… | ||||
| CVE-2026-29097US | high7.5 | — | ||
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions prior to 7.15.1 and 8.9.3 contain a Server-Side Request Forgery (… | ||||
| CVE-2026-29096US | medium6.5 | — | ||
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, when creating or editing a report (AOR… | ||||
02
references
External citations — patches, advisories, analysis.
- SuiteCRM 7.15.1 Release Notes vom 2026-03-19external
- SuiteCRM GitHub Advisory GHSA-24pf-9cvh-ppcg vom 2026-03-19external
- SuiteCRM GitHub Advisory GHSA-26vx-rj47-x599 vom 2026-03-19external
- SuiteCRM GitHub Advisory GHSA-38rf-h37x-7767 vom 2026-03-19external
- SuiteCRM GitHub Advisory GHSA-6858-fhw5-56gf vom 2026-03-19external
- SuiteCRM GitHub Advisory GHSA-7g39-m4fg-vrq7 vom 2026-03-19external
- SuiteCRM GitHub Advisory GHSA-g7hf-3j93-rwm5 vom 2026-03-19external
- SuiteCRM GitHub Advisory GHSA-m6x8-3hxp-qxwv vom 2026-03-19external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan