CVE-2026-63217

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, the generatePdf entry point loads an arbitrary record through BeanFactory::getBean without checking the requesting user's record access. The affected flow begins at...

CVE-2026-63217

The open-source CRM software SuiteCRM contains an Insecure Direct Object Reference (IDOR) vulnerability in the generatePdf entry point, affecting versions prior to 7.15.2 and 8.10.2 . The root cause is located in modules/AOS_PDF_Templates/generatePdf.php, where the BeanFactory::getBean() function...