CVE-2026-61649

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, the SSRF protection added in 7.15.1 uses a substring comparison in isSelfRequest rather than hostname equality. The affected flow begins at validateexternalhost and...

CVE-2026-61649

Prior to versions 7.15.2 and 8.10.2 , SuiteCRM is vulnerable to a Server-Side Request Forgery (SSRF) . The vulnerability exists because the isSelfRequest() function uses a substring comparison instead of hostname equality to validate requests. An authenticated attacker can exploit this by placing...