2 matches found
CVE-2026-41160
EspoCRM is an open source customer relationship management application. Prior to 9.3.5, a business logic flaw Broken Access Control in EspoCRM 9.3.3 allows low-privileged users to pin arbitrary notes without having the required edit permissions for the parent object. Due to a "write first,...
4.3CVSS5.8AI score0.00292EPSS
SaveExploits0References1
CVE-2026-41160
EspoCRM is an open source customer relationship management application. Prior to 9.3.5, a business logic flaw Broken Access Control in EspoCRM 9.3.3 allows low-privileged users to pin arbitrary notes without having the required edit permissions for the parent object. Due to a "write first,...
4.3CVSS6AI score0.00292EPSS
SaveExploits0References2Affected Software1
20