CVE-2026-63215

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, the REST API v4.1 getentrylist method is vulnerable to time-based blind SQL injection when an authenticated caller simultaneously bypasses two independent security...

CVE-2026-63215

The SuiteCRM CRM software is vulnerable to a time-based blind SQL injection in the REST API v4.1 get_entry_list method prior to versions 7.15.2 and 8.10.2 . An authenticated caller can trigger this vulnerability by simultaneously bypassing two unspecified security mechanisms. Successful exploitat...