CVE-2026-100364

The SuiteCRM CRM software (prior to versions 7.15.2 and 8.10.2 ) is vulnerable to an authorization bypass due to a flaw in the V8 JSON:API update path. Specifically, the updateRecord() flow fails to remove the id attribute before assigning user-supplied attributes to a SugarBean . This allows an ...