CVE-2026-69135

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, the Project module interpolates the authenticated caller's duplicateId POST parameter directly into a SQL query without sanitization, quoting, or parameterization. A...

CVE-2026-69135

The SuiteCRM CRM application is vulnerable to an authenticated SQL injection in the Project module prior to versions 7.15.2 and 8.10.2 . The root cause is the interpolation of the authenticated caller's duplicateId POST parameter directly into a SQL query without proper sanitization, quoting, or ...

CVE-2026-69135 SuiteCRM: Authenticated SQL Injection In Project Module

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, the Project module interpolates the authenticated caller's duplicateId POST parameter directly into a SQL query without sanitization, quoting, or parameterization. A...

EUVD-2026-117660

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, the Project module interpolates the authenticated caller's duplicateId POST parameter directly into a SQL query without sanitization, quoting, or parameterization. A...