SuiteCRM SuiteCRM-Core

Name: SuiteCRM SuiteCRM-Core
Brand: SuiteCRM

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical1high0medium0low

updated 2026-10-28

vulnerabilities (6)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-29109US	high7.2	0.49% (42nd)	—	no fix	2026-03-20	≤ < 8.9.3
CVE-2025-64492US	—	0.37% (30th)	—	no fix	2025-11-08	≤ < 8.9.1
CVE-2025-64493US	—	0.35% (28th)	—	8.9.1	2025-11-08	8.6.0, → 8.9.1
CVE-2026-29108US	—	0.32% (25th)	—	no fix	2026-03-20	≤ < 8.9.3
CVE-2025-54786US	—	0.30% (23rd)	—	7.14.7	2025-08-07	2 versions
CVE-2026-32697US	—	0.29% (21st)	—	no fix	2026-03-20	≤ < 8.9.3

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2 CVEs
CWE-284Improper Access Control1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-502Deserialization of Untrusted Data1 CVEs
CWE-639Authorization Bypass Through User-Controlled Key1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.