PT-2026-104587 · Undefined · Undefined

CVE-2026-69137

Published

2026-10-03

Updated

2026-10-03

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

SuiteCRM has a public SSRF proof of concept. CVE-2026-69137.

The catch everyone's missing: "authenticated" doesn't mean privileged. Any valid user account is enough.

#SuiteCRM #SSRF #CyberSecurity #AppSec #InfoSec #WebSecurity https://t.co/U6cfGAFuxo

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-69137

Undefined