PT-2026-26440 · Suitecrm · Suitecrm

Quirmz · Published 2026-03-19 · Updated 2026-03-19 · CVE-2026-29102

NVD

CVSS v3.1

7.2

High

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, an Authenticated Remote Code Execution (RCE) vulnerability exists in SuiteCRM modules. Versions 7.15.1 and 8.9.3 patch the issue.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2026-29102

Affected Products

Suitecrm

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-29102 · Security Note
• https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-mr5v-wcgr-98qr · Note
• https://docs.suitecrm.com/admin/releases/7.15.x · Note