PT-2026-45504 · Bottelet+1 · Daybyday Crm

Mitchell_45 · CVE-2026-10283 · Published 2026-06-01 · Updated 2026-06-01

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Bottelet DaybydayCRM versions prior to 2.2.2

Description An issue exists within the Setting Handler component where a manipulation of an unknown function allows for missing authentication. This flaw enables remote exploitation of the system.

Recommendations Apply the available patch for versions prior to 2.2.2.

Exploit

Fix

Improper Authentication

Missing Authentication

Weakness Enumeration

CWE-287

CWE-306

Related Identifiers

CVE-2026-10283

Affected Products

Daybyday Crm

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/10xxx/CVE-2026-10283.json · Exploit
• https://github.com/Bottelet/DaybydayCRM/pull/363 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-10283 · Security Note
• https://osv.dev/vulnerability/CVE-2026-10283 · Vendor Advisory
• https://github.com/Bottelet/DaybydayCRM/issues/348 · Note
• https://vuldb.com/cve/CVE-2026-10283 · Note
• https://vuldb.com/submit/825443 · Note
• https://vuldb.com/submit/825442 · Note
• https://vuldb.com/vuln/367576/cti · Note
• https://github.com/Bottelet/DaybydayCRM · Note
• https://vuldb.com/vuln/367576 · Note