CVE-2026-63218

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, the changeReportPage controller action renders a protected report without repeating the record-level access check enforced by DetailView. The affected flow begins at...

EUVD-2026-117634

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, the changeReportPage controller action renders a protected report without repeating the record-level access check enforced by DetailView. The affected flow begins at...

CVE-2026-63218

The SuiteCRM CRM software (versions prior to 7.15.2 and 8.10.2 ) contains a record-level authorization bypass within the changeReportPage controller action. The vulnerability occurs because the action fails to repeat the record-level access check enforced by DetailView when the flow begins at AOR...

CVE-2026-63218 SuiteCRM: Record-level Authorization Bypass via AOR_Reports changeReportPage

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, the changeReportPage controller action renders a protected report without repeating the record-level access check enforced by DetailView. The affected flow begins at...