https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T05:02:04.964273+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-85212 CVE-2026-85212 — CRMEB through 6.0.0 Missing Authorization via Inert verifyAuth Role Check 2026-10-09T05:02:04.982112+00:00

Affected: CRMEB

CRMEB contains an authentication bypass vulnerability in the verifyAuth() method of SystemRoleServices.php that returns true from both conditional branches. Sub-administrators and accounts with no roles can access restricted admin endpoints by exploiting the inert role check that always permits requests.