CVE-2026-69142

Name of the Vulnerable Software and Affected Versions SuiteCRM versions prior to 7.15.2 SuiteCRM versions prior to 8.10.2

Description The jjwg Maps map marker endpoint uses the authenticated caller's distance value in the map markers action without strict numeric validation or parameterization. This allows an authenticated attacker to alter the SQL query, extract database data, modify query results, and consume resources.

Recommendations Update to version 7.15.2 or later. Update to version 8.10.2 or later.