Vulnerability · Published Aug 16, 2026 · Assigned by VulDB
CVE-2026-19933DefaultFuction Customer-Relationship-Management-In-C-Project Customer Search gets stack-based overflow
Medium 6.3
In plain English
A medium-severity stack buffer overflow in Customer-Relationship-Management-In-C-Project from DefaultFuction. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).
Official description
A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2.0. Impacted is the function gets of the component Customer Search Module. This manipulation causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The project confirms, that "it’s being processed".
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| DefaultFuction | Customer-Relationship-Management-In-C-Project | 2.0 |
Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-390704 | DefaultFuction Customer-Relationship-Management-In-C-Project Customer Search gets stack-based overflow vdb-entry, technical-description
- VDB-390704 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- CVE-2026-19933 | CVE Analysis and Report third-party-advisory
- Submit #872649 | DefaultFuction CRM V2.0 Buffer Overflow third-party-advisory
- https://github.com/DefaultFuction/Customer-Relationship-Management-In-C-Project/issues/1 exploit, issue-tracking
- https://github.com/DefaultFuction/Customer-Relationship-Management-In-C-Project/ product