PT-2026-45504 · Bottelet · Daybyday Crm

Mitchell_45 · Published 2026-06-01 · Updated 2026-06-01 · CVE-2026-10283

NVD

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was detected in Bottelet DaybydayCRM up to 2.2.1. Affected is an unknown function of the component Setting Handler. Performing a manipulation results in missing authentication. Remote exploitation of the attack is possible. It is recommended to apply a patch to fix this issue.

Fix

Improper Authentication

Missing Authentication

Weakness Enumeration

CWE-287

CWE-306

Related Identifiers

CVE-2026-10283

Affected Products

Daybyday Crm

References · 9

• https://github.com/Bottelet/DaybydayCRM/pull/363 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-10283 · Security Note
• https://github.com/Bottelet/DaybydayCRM/issues/348 · Note
• https://vuldb.com/vuln/367576/cti · Note
• https://vuldb.com/submit/825442 · Note
• https://vuldb.com/submit/825443 · Note
• https://vuldb.com/vuln/367576 · Note
• https://github.com/Bottelet/DaybydayCRM · Note
• https://vuldb.com/cve/CVE-2026-10283 · Note