https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:03:35.142475+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-276656 EUVD-2026-276656 2026-10-03T05:03:35.181405+00:00 EUVD-2026-276656 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33289 fkie_cve-2026-33289 2026-10-03T05:03:35.181447+00:00

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, an LDAP Injection vulnerability exists in the SuiteCRM authentication flow. The application fails to properly sanitize user-supplied input before embedding it into the LDAP search filter. By injecting LDAP control characters, an unauthenticated attacker can manipulate the query logic, which can lead to authentication bypass or information disclosure. Versions 7.15.1 and 8.9.3 patch the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0792 WID-SEC-W-2026-0792 — SuiteCRM: Mehrere Schwachstellen 2026-10-03T05:03:35.181482+00:00

Ein Angreifer kann mehrere Schwachstellen in SuiteCRM ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, Server-Side Request Forgery durchzuführen, Phishing-Angriffe zu starten oder einen Denial-of-Service-Zustand herbeizuführen.