CVE-2026-100361

The SuiteCRM Customer Relationship Management application (versions prior to 7.15.2 and 8.10.2 ) is vulnerable to a mass assignment flaw in the V8 API write path. Specifically, the PATCH /Api/V8/module endpoint fails to enforce api-visible or sensitive metadata constraints. This allows an authent...