CVE-2026-108713

SuiteCRM through 7.15.2 and 8.x through 8.10.2 contains a missing authorization vulnerability that allows authenticated users to create and modify EmailMarketing records via the setCampaignMarketingAndTemplate entry point. Low-privileged users denied Campaigns access can post marketingId,...

CVE-2026-108713

SuiteCRM through 7.15.2 and 8.x through 8.10.2 contains a missing authorization vulnerability that allows authenticated users to create and modify EmailMarketing records via the setCampaignMarketingAndTemplate entry point. Low-privileged users denied Campaigns access can post marketingId,...

PT-2026-110116

Name of the Vulnerable Software and Affected Versions SuiteCRM versions 7.x through 7.15.2 SuiteCRM versions 8.x through 8.10.2 Description Authenticated users can create and modify EmailMarketing records due to missing authorization. Low-privileged users who are denied access to Campaigns can us...