CVE-2026-69134

The open-source CRM application SuiteCRM is vulnerable to SQL Injection in versions prior to 7.15.2 and 8.10.2 . The flaw exists in the REST v4 JSON handler , where the RAW_REQUEST value is used by relationship write helpers (including set_relationship, SugarRelationship::addRow(), SugarRelations...