SuiteCRM SuiteCRM-Core

• CVE-2026-32697 Medium 6.5 SuiteCRM: RecordHandler::getRecord() missing ACLAccess('view') check allows any authenticated user to read any record (IDOR) 0.3%
• CVE-2026-29109 High 8.6 SuiteCRM Authenticated Remote Code Execution via Unsafe Deserialization in SavedSearch Filter Processing 0.5%
• CVE-2026-29108 Medium 6.5 Authenticated SuiteCRM Users Can Retrieve The Password Hash of Any User 0.3%
• CVE-2025-64493 Medium 6.5 SuiteCRM is Vulnerable to Authenticated Blind SQL Injection via GraphQL 0.4%
• CVE-2025-64492 High 8.8 SuiteCRM is Vulnerable to Authenticated Time Based Blind SQL Injection 0.4%
• CVE-2025-54786 Medium 5.3 SuiteCRM: Legacy iCal service allows unauthenticated access to meeting data 0.3%