CVE-2026-63111

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, the V8 module API lacks module-level authorization and permits a low-privileged user to create SchedulersJobs records with attacker-controlled target values. The...

CVE-2026-63111

The SuiteCRM CRM software is vulnerable to Server-Side Request Forgery (SSRF) due to a lack of module-level authorization in the V8 module API . A low-privileged user can create SchedulersJobs records with attacker-controlled target values via the /Api/V8/module endpoint. These jobs are subsequen...