CVE-2026-69141 SuiteCRM: SQL injection via search param in modules/Cases/controller.php

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, the CasesController actiongetkbarticles action interpolates $POST'search' into a CASE WHEN ... LIKE expression and the SQL WHERE clause. Although securexss normally...

CVE-2026-69141

The SuiteCRM CRM application is vulnerable to SQL injection in the CasesController action action_get_kb_articles within modules/Cases/controller.php for versions prior to 7.15.2 and 8.10.2 . The root cause is the improper interpolation of the $_POST['search'] parameter into a CASE WHEN ... LIKE e...