CVE-2026-69137

SuiteCRM versions prior to 7.15.2 and 8.10.2 are vulnerable to an authenticated Server-Side Request Forgery (SSRF) in the CalendarAccount::action_testConnection action. The flaw exists because the application passes the server_url parameter directly to cURL without validating the host, address, o...