CVE-2026-63217 SuiteCRM: IDOR in generatePdf Entry Point Allows Record Data Exfiltration

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, the generatePdf entry point loads an arbitrary record through BeanFactory::getBean without checking the requesting user's record access. The affected flow begins at...