MicroPyramid

Products

ProductCVEsExploitedLatest
BottleCRM4–Oct 14, 2026

Exploited and recent CVEs

  • CVE-2026-110595 Medium 4.3 BottleCRM 0.45 through 1.14.5 Memory Exhaustion via Contact and Case CSV Import 0.5%
  • CVE-2026-110594 Medium 4.9 BottleCRM 0.43 through 1.14.5 ReDoS via Case Routing Rule Regex 0.6%
  • CVE-2026-110593 Medium 5.4 BottleCRM through 1.14.5 Server-Side Template Injection via Account Email create_mail 0.4%
  • CVE-2026-110592 Low 3.5 BottleCRM 0.30 through 1.14.5 HTML Injection via Custom Invoice PDF Template 0.4%