Ccrmeb

Products

Exploited and recent CVEs

• CVE-2026-111359 High 7.1 CRMEB 5.6.1 through 6.0.0 IDOR via giftDetail and receiveGift 0.3%
• CVE-2026-111354 Low 3.1 crmeb_java through 3.1 Authorization Bypass via Front Order Express and Refund Endpoints 0.3%
• CVE-2026-85212 High 8.3 CRMEB through 6.0.0 Missing Authorization via Inert verifyAuth Role Check 0.6%
• CVE-2026-85177 Medium 5.4 CRMEB through 6.0.0 Unauthorized Message Modification via edit_message 0.4%
• CVE-2026-10771 High 7.3 crmeb crmeb_java base64 Qrcode Endpoint RestTemplateUtil.java RestTemplate.getForEntity server-side request forgery 0.3%