CVE-2026-112287

Krayin CRM versions prior to 2.2.7 are vulnerable to a broken object level authorization vulnerability within the EmailController write actions. This flaw allows authenticated users with restricted scopes to manipulate emails belonging to other users by providing specific numeric IDs. Specificall...