CVE-2026-69140

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, GetLatestRevision.php interpolates getlatestforid directly into an SQL UPDATE statement. Although securexss normally entity-encodes quotes, an input prefixed with an...

CVE-2026-69140

SuiteCRM versions prior to 7.15.2 and 8.10.2 are vulnerable to SQL injection in the GetLatestRevision.php component. The flaw occurs because the get_latest_for_id parameter is interpolated directly into an SQL UPDATE statement. While securexss() typically encodes quotes, an input prefixed with an...