https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T17:02:53.132741+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-10914 bdu:2025-10914 2026-10-09T17:02:53.183603+00:00 bdu:2025-10914 https://cve.radiocsirt.org/vuln/euvd-2026-260440 EUVD-2026-260440 2026-10-09T17:02:53.183639+00:00 EUVD-2026-260440 https://cve.radiocsirt.org/vuln/fkie_cve-2025-64492 fkie_cve-2025-64492 2026-10-09T17:02:53.183654+00:00

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions 8.9.0 and below contain a time-based blind SQL Injection vulnerability. This vulnerability allows an authenticated attacker to infer data from the database by measuring response times, potentially leading to the extraction of sensitive information. It is possible for an attacker to enumerate database, table, and column names, extract sensitive data, or escalate privileges. This is fixed in version 8.9.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2517 WID-SEC-W-2025-2517 — SuiteCRM: Mehrere Schwachstellen ermöglichen Manipulation von Dateien 2026-10-09T17:02:53.183687+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in SuiteCRM ausnutzen, um Dateien zu manipulieren.