Vulnerabilities in SuiteCRM
68 resultsCVE-2026-61650HIGHSuiteCRM: Incorrect Access Control in V8 relationship creation via missing edit authorizationEPSS 0.2%CVE-2026-69136HIGHSuiteCRM: Authenticated SQL Injection In handleAttachments functionEPSS 0.2%CVE-2026-29105MEDIUMSuiteCRM has Unauthenticated Open Redirect in Leads WebToLead CaptureEPSS 0.2%CVE-2025-64491MEDIUMSuiteCRM is vulnerable to unauthenticated reflected XSS through its Login pageEPSS 0.2%CVE-2025-41384MEDIUMReflected Cross-Site Scripting (XSS) in SuiteCRMEPSS 0.2%CVE-2026-29107MEDIUMSuiteCRM vulnerable to authenticated SSRF via PDF exportEPSS 0.2%CVE-2026-29100HIGHSuiteCRM has Reflected HTML Injection in Login Page via default_user_name ParameterEPSS 0.2%CVE-2026-29106MEDIUMSuiteCRM has blind XSS in return_id parameterEPSS 0.2%