CVE-2025-54786

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. In versions 7.14.6 and 8.8.0, the broken authentication in the legacy iCal service allows unauthenticated access to meeting data. An unauthenticated actor can view any user's meeting calendar...

CVE-2025-54786

SuiteCRM is affected by a broken authentication issue in the legacy iCal service that allows unauthenticated access to meeting data in versions 7.14.6 and 8.8.0. An unauthenticated actor can view any user’s meeting (calendar event) data, and related functionality enables user enumeration. The vul...