Skip to contentSuitecrm Suitecrm-core vulnerabilities
- suitecrm, suitecrm suitecrm-core +1 moreSuiteCRM: RecordHandler::getRecord() missing ACLAccess('view') check allows any authenticated user to read any record (IDOR)CVE-2026-326976.5 Medium
- suitecrm, suitecrm suitecrm-core +1 moreSuiteCRM Authenticated Remote Code Execution via Unsafe Deserialization in SavedSearch Filter ProcessingCVE-2026-291098.6 High
- suitecrm, suitecrm suitecrm-core +1 moreAuthenticated SuiteCRM Users Can Retrieve The Password Hash of Any UserCVE-2026-291086.5 Medium
- salesagility suitecrm, suitecrm suitecrm-core +1 moreSuiteCRM is Vulnerable to Authenticated Blind SQL Injection via GraphQLCVE-2025-644936.5 Medium
- salesagility suitecrm, suitecrm suitecrm-core +1 moreSuiteCRM is Vulnerable to Authenticated Time Based Blind SQL InjectionCVE-2025-644928.8 High
- salesagility suitecrm, suitecrm suitecrm-core +1 moreSuiteCRM: Legacy iCal service allows unauthenticated access to meeting dataCVE-2025-54786Fix available5.3 Medium
- salesagility suitecrm, suitecrm-core +1 moreSuiteCRM-Core Host Header Injection in /legacyCVE-2024-36419Fix available4.3 Medium
- salesagility suitecrm, suitecrm-core +1 moreSuiteCRM has Unauthenticated Graphql Introspection EnabledCVE-2023-47643Fix available3.1 Low