CVE-2026-69145

Name of the Vulnerable Software and Affected Versions SuiteCRM versions prior to 7.15.2 SuiteCRM versions prior to 8.10.2

Description An authenticated user with report configuration privileges can perform SQL injection. The issue occurs during AOR report generation when the application reloads the value stored in aor fields.field and concatenates it into a report SQL query without strict field validation, potentially leading to the disclosure of database contents.

Recommendations Update to version 7.15.2 or later. Update to version 8.10.2 or later.