CVE-2026-63217

The open-source CRM software SuiteCRM contains an Insecure Direct Object Reference (IDOR) vulnerability in the generatePdf entry point, affecting versions prior to 7.15.2 and 8.10.2 . The root cause is located in modules/AOS_PDF_Templates/generatePdf.php, where the BeanFactory::getBean() function...