Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-100360

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.2 and 8.10.2, V8 API relationship write paths do not consistently enforce object-level edit and view authorization on both related records. In the verified Account-to-Contact case, an authenticated user can create a relationship while unable to edit the Account and can delete relationship links to a hidden Contact that cannot be viewed directly. This issue is fixed in versions 7.15.2 and 8.10.2.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 29.0%
CVSS Severity
CVSS v3 Score 5.4
Products affected by CVE-2026-100360


Contact Us

Shodan ® - All rights reserved