CVE-2026-69142

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, the jjwgMaps map marker endpoint uses the authenticated caller's distance value in the mapmarkers action without strict numeric validation or parameterization. An...

CVE-2026-69142

The SuiteCRM CRM software is vulnerable to an authenticated SQL injection in the jjwg_Maps map marker endpoint. The root cause is the lack of strict numeric validation or parameterization for the distance value used in the map_markers action in versions prior to 7.15.2 and 8.10.2 . An authenticat...