CVE-2026-63213 SuiteCRM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in SuiteCRM

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, the Upgrade Wizard commit flow trusts the hidden ziptodir parameter, while cleanpath does not reject traversal sequences. An authenticated administrator can copy...