PT-2026-32680 · Undefined · Undefined

Trexnegro · Published 2026-04-14 · Updated 2026-04-17 · CVE-2026-38526

X.com · Huntermapping

CVSS v3.1

9.9

Critical

AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N

🚨Alert🚨 CVE-2026-38526(CVSS 10.0) : An Authenticated Arbitrary File Upload Vulnerability in Krayin CRM. 🔥PoC : https://t.co/NXsAdfLN7Q https://t.co/JVdglCRObw 📊 2.7K Services are found on the https://t.co/g3tSyh13yE yearly. 🔗Hunter Link:https://t.co/co7i1mbCh2 👇Query HUNTER : https://t.co/yFFcJwdIUc="Krayin CRM" 📰Refer:https://t.co/ddMdJ1GFjF #hunterhow #infosec #infosecurity #OSINT #Vulnerability

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2026-38526

Affected Products

Undefined

References · 6

• 🔥 https://github.com/TREXNEGRO/Security-Advisories/tree/main/CVE-2026-38526 · Exploit
• 🔥 https://github.com/TREXNEGRO/Security-Advisories/blob/main/CVE-2026-38526/poc.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-38526 · Security Note
• https://github.com/krayin/laravel-crm · Note
• https://twitter.com/ctiwatchcloud/status/2044385465436926035 · Twitter Post
• https://twitter.com/HunterMapping/status/2045053297459867853 · Twitter Post