CVE-2026-69145

The SuiteCRM application is vulnerable to an SQL Injection in the AOR report generation component prior to versions 7.15.2 and 8.10.2 . The root cause is the application's failure to perform strict field validation when reloading and concatenating the value stored in aor_fields.field into report ...

PT-2026-94133

Name of the Vulnerable Software and Affected Versions SuiteCRM versions prior to 7.15.2 SuiteCRM versions prior to 8.10.2 Description An authenticated user with permissions to save reports can perform a SQL injection attack. The issue occurs because the AOR Report::build report query where functi...