CVE-2026-69141

The SuiteCRM CRM application is vulnerable to SQL injection in the CasesController action action_get_kb_articles within modules/Cases/controller.php for versions prior to 7.15.2 and 8.10.2 . The root cause is the improper interpolation of the $_POST['search'] parameter into a CASE WHEN ... LIKE e...