https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T16:52:42.418573+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-64493 CVE-2025-64493 — SuiteCRM is Vulnerable to Authenticated Blind SQL Injection via GraphQL 2026-10-09T16:52:42.434532+00:00

Affected: SuiteCRM-Core

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions 8.6.0 through 8.9.0, there is an authenticated, blind (time-based) SQL-injection inside the appMetadata-operation of the GraphQL-API. This allows extraction of arbitrary data from the database, and does not require administrative access. This issue is fixed in version 8.9.1.