PT-2026-26438 · Suitecrm · Suitecrm

Dimitrop · Publicado 2026-03-19 · Atualizado 2026-03-20 · CVE-2026-29100

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions SuiteCRM versions 7.15.0

Description SuiteCRM is an open-source Customer Relationship Management (CRM) software application. A reflected HTML injection issue exists in the login page, allowing attackers to inject arbitrary HTML content. This can enable phishing attacks and page defacement.

Recommendations Update to SuiteCRM version 7.15.1.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-29100

GHSA-G7HF-3J93-RWM5

Produtos afetados

Suitecrm

Referências · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/29xxx/CVE-2026-29100.json · Exploit
• https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-g7hf-3j93-rwm5 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2026-29100 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-29100 · Nota de Segurança
• https://twitter.com/infoflowcloud/status/2034842763443802608 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2034841516049670425 · Publicação no Twitter