PT-2026-94133 · Undefined · Undefined
CVE-2026-71548
·
Published
2026-09-16
·
Updated
2026-09-16
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
New CVE published: CVE-2026-71548
Sometimes you don't need to break the syntax, just go with it 🎯
Authenticated SQL injection in SuiteCRM's AOR Reports module (High, CVSS 8.8). Any low-privileged user who can save a report could read the whole database, including the admin password hash.
Fixed in 8.10.2 / 7.15.2
Advisory: https://t.co/PtHIMOtY65
Notes: https://t.co/mfMjmyfSqq
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Undefined