CVE-2026-50769

creationtimestamp| type| source ---|---|--- 2026-08-18 20:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mteyxuehp324...

CVE-2026-50769

The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection time-based vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is...