CVE-2026-69140

SuiteCRM versions prior to 7.15.2 and 8.10.2 are vulnerable to SQL injection in the GetLatestRevision.php component. The flaw occurs because the get_latest_for_id parameter is interpolated directly into an SQL UPDATE statement. While securexss() typically encodes quotes, an input prefixed with an...