{"schema_version":"2","view":"grouped","data":[{"id":50591,"cve_ids":["CVE-2026-112288"],"payload":{"kind":"advisory","title":"Krayin CRM 2.2.5 before 2.2.7 SSRF Filter Bypass via DNS Rebinding","summary":"Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal addresses via DNS rebinding. Attackers can return a public address during WebhookService::isSafeEndpoint() validation and an internal address when Guzzle re-resolves, sending blind requests to internal services and cloud metadata endpoints.","evidence":"cve:CVE-2026-112288","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2026-112288","aliases":["CVE-2026-112288"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":2.1,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"HIGH","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"LOW"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.3,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"LOW"}}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"2.2.5","lessThan":"2.2.7","versionType":"semver"}],"packageURL":"pkg:composer/krayin/laravel-crm","collectionURL":"https://packagist.org","defaultStatus":"unaffected"}],"modified":"2026-10-22T02:54:40.630Z","provider":"cve","references":["https://github.com/krayin/laravel-crm/pull/2683","https://github.com/krayin/laravel-crm/commit/64b9125f33a7eb2ef9916d0e5fd8215c7f6a8c28","https://github.com/krayin/laravel-crm/blob/v2.2.6/packages/Webkul/Automation/src/Services/WebhookService.php","https://github.com/krayin/laravel-crm/releases/tag/v2.2.7","https://www.vulncheck.com/advisories/krayin-crm-2.2.5-before-2.2.7-ssrf-filter-bypass-via-dns-rebinding"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-112288","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-22T02:54:31.018474Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T02:54:40.630Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-19T13:55:31.283Z"}}},"related_cves":[{"value":"CVE-2026-112288","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:71488990-75a7-49f6-9832-9ab74c3d7444","priority":{"reasons":[],"severity":"low","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"low"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112288","advisory_id":"71488990-75a7-49f6-9832-9ab74c3d7444","event_types":["advisory"],"published_at":"2026-10-25T14:01:41.84442+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-19T13:55:31.283+00:00","detail_url":"/advisories/advisory%3A71488990-75a7-49f6-9832-9ab74c3d7444","group":{"id":"advisory:71488990-75a7-49f6-9832-9ab74c3d7444","revision":1,"primary_event_id":50119,"change":"published","superseded_by":[],"changed":{"id":50119,"cve_ids":["CVE-2026-112288"],"payload":{"kind":"advisory","title":"Krayin CRM 2.2.5 before 2.2.7 SSRF Filter Bypass via DNS Rebinding","summary":"Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal addresses via DNS rebinding. Attackers can return a public address during WebhookService::isSafeEndpoint() validation and an internal address when Guzzle re-resolves, sending blind requests to internal services and cloud metadata endpoints.","evidence":"cve:CVE-2026-112288","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2026-112288","aliases":["CVE-2026-112288"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":2.1,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"HIGH","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"LOW"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.3,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"LOW"}}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"2.2.5","lessThan":"2.2.7","versionType":"semver"}],"packageURL":"pkg:composer/krayin/laravel-crm","collectionURL":"https://packagist.org","defaultStatus":"unaffected"}],"modified":"2026-10-22T02:54:40.630Z","provider":"cve","references":["https://github.com/krayin/laravel-crm/pull/2683","https://github.com/krayin/laravel-crm/commit/64b9125f33a7eb2ef9916d0e5fd8215c7f6a8c28","https://github.com/krayin/laravel-crm/blob/v2.2.6/packages/Webkul/Automation/src/Services/WebhookService.php","https://github.com/krayin/laravel-crm/releases/tag/v2.2.7","https://www.vulncheck.com/advisories/krayin-crm-2.2.5-before-2.2.7-ssrf-filter-bypass-via-dns-rebinding"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-112288","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-22T02:54:31.018474Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T02:54:40.630Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-19T13:55:31.283Z"}}},"related_cves":[{"value":"CVE-2026-112288","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:71488990-75a7-49f6-9832-9ab74c3d7444","priority":{"reasons":[],"severity":"low","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"low"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112288","advisory_id":"71488990-75a7-49f6-9832-9ab74c3d7444","event_types":["advisory"],"published_at":"2026-10-25T14:01:41.84442+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-19T13:55:31.283+00:00","detail_url":"/events/50119"},"members":[{"id":50119,"cve_ids":["CVE-2026-112288"],"payload":{"kind":"advisory","title":"Krayin CRM 2.2.5 before 2.2.7 SSRF Filter Bypass via DNS Rebinding","summary":"Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal addresses via DNS rebinding. Attackers can return a public address during WebhookService::isSafeEndpoint() validation and an internal address when Guzzle re-resolves, sending blind requests to internal services and cloud metadata endpoints.","evidence":"cve:CVE-2026-112288","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2026-112288","aliases":["CVE-2026-112288"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":2.1,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"HIGH","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"LOW"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.3,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"LOW"}}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"2.2.5","lessThan":"2.2.7","versionType":"semver"}],"packageURL":"pkg:composer/krayin/laravel-crm","collectionURL":"https://packagist.org","defaultStatus":"unaffected"}],"modified":"2026-10-22T02:54:40.630Z","provider":"cve","references":["https://github.com/krayin/laravel-crm/pull/2683","https://github.com/krayin/laravel-crm/commit/64b9125f33a7eb2ef9916d0e5fd8215c7f6a8c28","https://github.com/krayin/laravel-crm/blob/v2.2.6/packages/Webkul/Automation/src/Services/WebhookService.php","https://github.com/krayin/laravel-crm/releases/tag/v2.2.7","https://www.vulncheck.com/advisories/krayin-crm-2.2.5-before-2.2.7-ssrf-filter-bypass-via-dns-rebinding"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-112288","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-22T02:54:31.018474Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T02:54:40.630Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-19T13:55:31.283Z"}}},"related_cves":[{"value":"CVE-2026-112288","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:71488990-75a7-49f6-9832-9ab74c3d7444","priority":{"reasons":[],"severity":"low","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"low"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112288","advisory_id":"71488990-75a7-49f6-9832-9ab74c3d7444","event_types":["advisory"],"published_at":"2026-10-25T14:01:41.84442+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-19T13:55:31.283+00:00","detail_url":"/events/50119"}]}},{"id":40180,"cve_ids":["CVE-2026-112287"],"payload":{"kind":"advisory","title":"Krayin CRM before 2.2.7 Broken Object Level Authorization in Mail Module","summary":"Krayin CRM before 2.2.7 contains a broken object level authorization vulnerability in EmailController write actions that allows scope-restricted authenticated users to manipulate other users' emails by supplying their numeric IDs. Attackers can call update, destroy, mass-update or mass-destroy endpoints to edit, re-send via is_draft=0, trash or permanently delete emails and disclose their subject, body and linked lead and person data.","evidence":"cve:CVE-2026-112287","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-112287","aliases":["CVE-2026-112287"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"LOW"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"0","lessThan":"2.2.7","versionType":"semver"}],"packageURL":"pkg:composer/krayin/laravel-crm","collectionURL":"https://packagist.org","defaultStatus":"unaffected"}],"modified":"2026-10-19T18:30:27.530Z","provider":"cve","references":["https://github.com/krayin/laravel-crm/pull/2683","https://github.com/krayin/laravel-crm/commit/64b9125f33a7eb2ef9916d0e5fd8215c7f6a8c28","https://github.com/krayin/laravel-crm/blob/v2.2.6/packages/Webkul/Admin/src/Http/Controllers/Mail/EmailController.php","https://github.com/krayin/laravel-crm/releases/tag/v2.2.7","https://www.vulncheck.com/advisories/krayin-crm-before-2.2.7-broken-object-level-authorization-in-mail-module"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-112287","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-19T18:30:19.168151Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-19T18:30:27.530Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-19T13:55:30.623Z"}}},"related_cves":[{"value":"CVE-2026-112287","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:d9531c83-eaa4-4cb6-9c2c-47515637bbe2","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112287","advisory_id":"d9531c83-eaa4-4cb6-9c2c-47515637bbe2","event_types":["advisory"],"published_at":"2026-10-25T10:52:20.929602+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-19T13:55:30.623+00:00","detail_url":"/advisories/advisory%3Ad9531c83-eaa4-4cb6-9c2c-47515637bbe2","group":{"id":"advisory:d9531c83-eaa4-4cb6-9c2c-47515637bbe2","revision":1,"primary_event_id":39812,"change":"published","superseded_by":[],"changed":{"id":39812,"cve_ids":["CVE-2026-112287"],"payload":{"kind":"advisory","title":"Krayin CRM before 2.2.7 Broken Object Level Authorization in Mail Module","summary":"Krayin CRM before 2.2.7 contains a broken object level authorization vulnerability in EmailController write actions that allows scope-restricted authenticated users to manipulate other users' emails by supplying their numeric IDs. Attackers can call update, destroy, mass-update or mass-destroy endpoints to edit, re-send via is_draft=0, trash or permanently delete emails and disclose their subject, body and linked lead and person data.","evidence":"cve:CVE-2026-112287","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-112287","aliases":["CVE-2026-112287"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"LOW"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"0","lessThan":"2.2.7","versionType":"semver"}],"packageURL":"pkg:composer/krayin/laravel-crm","collectionURL":"https://packagist.org","defaultStatus":"unaffected"}],"modified":"2026-10-19T18:30:27.530Z","provider":"cve","references":["https://github.com/krayin/laravel-crm/pull/2683","https://github.com/krayin/laravel-crm/commit/64b9125f33a7eb2ef9916d0e5fd8215c7f6a8c28","https://github.com/krayin/laravel-crm/blob/v2.2.6/packages/Webkul/Admin/src/Http/Controllers/Mail/EmailController.php","https://github.com/krayin/laravel-crm/releases/tag/v2.2.7","https://www.vulncheck.com/advisories/krayin-crm-before-2.2.7-broken-object-level-authorization-in-mail-module"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-112287","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-19T18:30:19.168151Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-19T18:30:27.530Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-19T13:55:30.623Z"}}},"related_cves":[{"value":"CVE-2026-112287","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:d9531c83-eaa4-4cb6-9c2c-47515637bbe2","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112287","advisory_id":"d9531c83-eaa4-4cb6-9c2c-47515637bbe2","event_types":["advisory"],"published_at":"2026-10-25T10:52:20.929602+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-19T13:55:30.623+00:00","detail_url":"/events/39812"},"members":[{"id":39812,"cve_ids":["CVE-2026-112287"],"payload":{"kind":"advisory","title":"Krayin CRM before 2.2.7 Broken Object Level Authorization in Mail Module","summary":"Krayin CRM before 2.2.7 contains a broken object level authorization vulnerability in EmailController write actions that allows scope-restricted authenticated users to manipulate other users' emails by supplying their numeric IDs. Attackers can call update, destroy, mass-update or mass-destroy endpoints to edit, re-send via is_draft=0, trash or permanently delete emails and disclose their subject, body and linked lead and person data.","evidence":"cve:CVE-2026-112287","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-112287","aliases":["CVE-2026-112287"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"LOW"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"0","lessThan":"2.2.7","versionType":"semver"}],"packageURL":"pkg:composer/krayin/laravel-crm","collectionURL":"https://packagist.org","defaultStatus":"unaffected"}],"modified":"2026-10-19T18:30:27.530Z","provider":"cve","references":["https://github.com/krayin/laravel-crm/pull/2683","https://github.com/krayin/laravel-crm/commit/64b9125f33a7eb2ef9916d0e5fd8215c7f6a8c28","https://github.com/krayin/laravel-crm/blob/v2.2.6/packages/Webkul/Admin/src/Http/Controllers/Mail/EmailController.php","https://github.com/krayin/laravel-crm/releases/tag/v2.2.7","https://www.vulncheck.com/advisories/krayin-crm-before-2.2.7-broken-object-level-authorization-in-mail-module"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-112287","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-19T18:30:19.168151Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-19T18:30:27.530Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-19T13:55:30.623Z"}}},"related_cves":[{"value":"CVE-2026-112287","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:d9531c83-eaa4-4cb6-9c2c-47515637bbe2","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112287","advisory_id":"d9531c83-eaa4-4cb6-9c2c-47515637bbe2","event_types":["advisory"],"published_at":"2026-10-25T10:52:20.929602+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-19T13:55:30.623+00:00","detail_url":"/events/39812"}]}},{"id":39222,"cve_ids":["CVE-2026-112286"],"payload":{"kind":"advisory","title":"Krayin CRM before 2.2.7 IDOR via Quote Search and Lead-Products Endpoints","summary":"Krayin CRM before 2.2.7 contains an insecure direct object reference vulnerability that allows scope-restricted authenticated users to read other users' quotes by bypassing per-user data scope checks in QuoteController. Attackers can query the quotes search and lead-products endpoints to retrieve quote addresses, totals, contact details, and product pricing belonging to any user or lead.","evidence":"cve:CVE-2026-112286","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-112286","aliases":["CVE-2026-112286"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"0","lessThan":"2.2.7","versionType":"semver"}],"packageURL":"pkg:composer/krayin/laravel-crm","collectionURL":"https://packagist.org","defaultStatus":"unaffected"}],"modified":"2026-10-19T14:19:36.695Z","provider":"cve","references":["https://github.com/krayin/laravel-crm/pull/2683","https://github.com/krayin/laravel-crm/commit/64b9125f33a7eb2ef9916d0e5fd8215c7f6a8c28","https://github.com/krayin/laravel-crm/blob/v2.2.6/packages/Webkul/Admin/src/Http/Controllers/Quote/QuoteController.php","https://github.com/krayin/laravel-crm/releases/tag/v2.2.7","https://www.vulncheck.com/advisories/krayin-crm-before-2.2.7-idor-via-quote-search-and-lead-products-endpoints"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-112286","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-19T14:19:23.316774Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-19T14:19:36.695Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-19T13:55:29.924Z"}}},"related_cves":[{"value":"CVE-2026-112286","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:5a4f6c72-215a-423f-9cbd-6daf1ecc7f7a","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112286","advisory_id":"5a4f6c72-215a-423f-9cbd-6daf1ecc7f7a","event_types":["advisory"],"published_at":"2026-10-25T10:37:22.733483+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-19T13:55:29.924+00:00","detail_url":"/advisories/advisory%3A5a4f6c72-215a-423f-9cbd-6daf1ecc7f7a","group":{"id":"advisory:5a4f6c72-215a-423f-9cbd-6daf1ecc7f7a","revision":1,"primary_event_id":38868,"change":"published","superseded_by":[],"changed":{"id":38868,"cve_ids":["CVE-2026-112286"],"payload":{"kind":"advisory","title":"Krayin CRM before 2.2.7 IDOR via Quote Search and Lead-Products Endpoints","summary":"Krayin CRM before 2.2.7 contains an insecure direct object reference vulnerability that allows scope-restricted authenticated users to read other users' quotes by bypassing per-user data scope checks in QuoteController. Attackers can query the quotes search and lead-products endpoints to retrieve quote addresses, totals, contact details, and product pricing belonging to any user or lead.","evidence":"cve:CVE-2026-112286","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-112286","aliases":["CVE-2026-112286"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"0","lessThan":"2.2.7","versionType":"semver"}],"packageURL":"pkg:composer/krayin/laravel-crm","collectionURL":"https://packagist.org","defaultStatus":"unaffected"}],"modified":"2026-10-19T14:19:36.695Z","provider":"cve","references":["https://github.com/krayin/laravel-crm/pull/2683","https://github.com/krayin/laravel-crm/commit/64b9125f33a7eb2ef9916d0e5fd8215c7f6a8c28","https://github.com/krayin/laravel-crm/blob/v2.2.6/packages/Webkul/Admin/src/Http/Controllers/Quote/QuoteController.php","https://github.com/krayin/laravel-crm/releases/tag/v2.2.7","https://www.vulncheck.com/advisories/krayin-crm-before-2.2.7-idor-via-quote-search-and-lead-products-endpoints"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-112286","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-19T14:19:23.316774Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-19T14:19:36.695Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-19T13:55:29.924Z"}}},"related_cves":[{"value":"CVE-2026-112286","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:5a4f6c72-215a-423f-9cbd-6daf1ecc7f7a","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112286","advisory_id":"5a4f6c72-215a-423f-9cbd-6daf1ecc7f7a","event_types":["advisory"],"published_at":"2026-10-25T10:37:22.733483+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-19T13:55:29.924+00:00","detail_url":"/events/38868"},"members":[{"id":38868,"cve_ids":["CVE-2026-112286"],"payload":{"kind":"advisory","title":"Krayin CRM before 2.2.7 IDOR via Quote Search and Lead-Products Endpoints","summary":"Krayin CRM before 2.2.7 contains an insecure direct object reference vulnerability that allows scope-restricted authenticated users to read other users' quotes by bypassing per-user data scope checks in QuoteController. Attackers can query the quotes search and lead-products endpoints to retrieve quote addresses, totals, contact details, and product pricing belonging to any user or lead.","evidence":"cve:CVE-2026-112286","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-112286","aliases":["CVE-2026-112286"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"0","lessThan":"2.2.7","versionType":"semver"}],"packageURL":"pkg:composer/krayin/laravel-crm","collectionURL":"https://packagist.org","defaultStatus":"unaffected"}],"modified":"2026-10-19T14:19:36.695Z","provider":"cve","references":["https://github.com/krayin/laravel-crm/pull/2683","https://github.com/krayin/laravel-crm/commit/64b9125f33a7eb2ef9916d0e5fd8215c7f6a8c28","https://github.com/krayin/laravel-crm/blob/v2.2.6/packages/Webkul/Admin/src/Http/Controllers/Quote/QuoteController.php","https://github.com/krayin/laravel-crm/releases/tag/v2.2.7","https://www.vulncheck.com/advisories/krayin-crm-before-2.2.7-idor-via-quote-search-and-lead-products-endpoints"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-112286","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-19T14:19:23.316774Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-19T14:19:36.695Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-19T13:55:29.924Z"}}},"related_cves":[{"value":"CVE-2026-112286","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:5a4f6c72-215a-423f-9cbd-6daf1ecc7f7a","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112286","advisory_id":"5a4f6c72-215a-423f-9cbd-6daf1ecc7f7a","event_types":["advisory"],"published_at":"2026-10-25T10:37:22.733483+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-19T13:55:29.924+00:00","detail_url":"/events/38868"}]}},{"id":23319,"cve_ids":["CVE-2026-110630"],"payload":{"kind":"advisory","title":"VentureDrake Laravel CRM before 2.4.0 Privilege Escalation via Unscoped Role Assignment","summary":"VentureDrake Laravel CRM before 2.4.0 contains an incorrect authorization vulnerability in user management that allows authenticated administrators to assign unrestricted roles via Role::find. Attackers with user-management access can assign the Owner role or other teams' roles and delete cross-team users through the unscoped UserIndex delete() method.","evidence":"cve:CVE-2026-110630","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-110630","aliases":["CVE-2026-110630"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"HIGH","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"affected":[{"repo":"https://github.com/venturedrake/laravel-crm","vendor":"venturedrake","product":"laravel-crm","versions":[{"status":"affected","version":"0","lessThan":"2.4.0","versionType":"semver"}],"packageURL":"pkg:composer/venturedrake/laravel-crm","collectionURL":"https://packagist.org","defaultStatus":"unaffected"}],"modified":"2026-10-14T20:20:11.778Z","provider":"cve","references":["https://github.com/venturedrake/laravel-crm/issues/79","https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Http/Controllers/UserController.php#L87-L94","https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Livewire/Users/UserIndex.php#L83-L90","https://github.com/venturedrake/laravel-crm/commit/d64b59fb9f7355e1be9951fbcc5f54ed715dc212","https://github.com/venturedrake/laravel-crm/commit/27bd5081004913660ccb3e0181b351a2e4ded104","https://github.com/venturedrake/laravel-crm/releases/tag/2.4.0","https://github.com/venturedrake/laravel-crm","https://www.vulncheck.com/advisories/venturedrake-laravel-crm-before-2.4.0-privilege-escalation-via-unscoped-role-assignment"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-110630","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T20:20:04.862530Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T20:20:11.778Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-14T14:17:04.557Z"}}},"related_cves":[{"value":"CVE-2026-110630","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:c034b44f-39e1-4492-9057-4fbfcd6a32df","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110630","advisory_id":"c034b44f-39e1-4492-9057-4fbfcd6a32df","event_types":["advisory"],"published_at":"2026-10-25T06:14:25.65957+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-14T14:17:04.557+00:00","detail_url":"/advisories/advisory%3Ac034b44f-39e1-4492-9057-4fbfcd6a32df","group":{"id":"advisory:c034b44f-39e1-4492-9057-4fbfcd6a32df","revision":1,"primary_event_id":23149,"change":"published","superseded_by":[],"changed":{"id":23149,"cve_ids":["CVE-2026-110630"],"payload":{"kind":"advisory","title":"VentureDrake Laravel CRM before 2.4.0 Privilege Escalation via Unscoped Role Assignment","summary":"VentureDrake Laravel CRM before 2.4.0 contains an incorrect authorization vulnerability in user management that allows authenticated administrators to assign unrestricted roles via Role::find. Attackers with user-management access can assign the Owner role or other teams' roles and delete cross-team users through the unscoped UserIndex delete() method.","evidence":"cve:CVE-2026-110630","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-110630","aliases":["CVE-2026-110630"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"HIGH","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"affected":[{"repo":"https://github.com/venturedrake/laravel-crm","vendor":"venturedrake","product":"laravel-crm","versions":[{"status":"affected","version":"0","lessThan":"2.4.0","versionType":"semver"}],"packageURL":"pkg:composer/venturedrake/laravel-crm","collectionURL":"https://packagist.org","defaultStatus":"unaffected"}],"modified":"2026-10-14T20:20:11.778Z","provider":"cve","references":["https://github.com/venturedrake/laravel-crm/issues/79","https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Http/Controllers/UserController.php#L87-L94","https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Livewire/Users/UserIndex.php#L83-L90","https://github.com/venturedrake/laravel-crm/commit/d64b59fb9f7355e1be9951fbcc5f54ed715dc212","https://github.com/venturedrake/laravel-crm/commit/27bd5081004913660ccb3e0181b351a2e4ded104","https://github.com/venturedrake/laravel-crm/releases/tag/2.4.0","https://github.com/venturedrake/laravel-crm","https://www.vulncheck.com/advisories/venturedrake-laravel-crm-before-2.4.0-privilege-escalation-via-unscoped-role-assignment"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-110630","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T20:20:04.862530Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T20:20:11.778Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-14T14:17:04.557Z"}}},"related_cves":[{"value":"CVE-2026-110630","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:c034b44f-39e1-4492-9057-4fbfcd6a32df","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110630","advisory_id":"c034b44f-39e1-4492-9057-4fbfcd6a32df","event_types":["advisory"],"published_at":"2026-10-25T06:14:25.65957+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-14T14:17:04.557+00:00","detail_url":"/events/23149"},"members":[{"id":23149,"cve_ids":["CVE-2026-110630"],"payload":{"kind":"advisory","title":"VentureDrake Laravel CRM before 2.4.0 Privilege Escalation via Unscoped Role Assignment","summary":"VentureDrake Laravel CRM before 2.4.0 contains an incorrect authorization vulnerability in user management that allows authenticated administrators to assign unrestricted roles via Role::find. Attackers with user-management access can assign the Owner role or other teams' roles and delete cross-team users through the unscoped UserIndex delete() method.","evidence":"cve:CVE-2026-110630","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-110630","aliases":["CVE-2026-110630"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"HIGH","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"affected":[{"repo":"https://github.com/venturedrake/laravel-crm","vendor":"venturedrake","product":"laravel-crm","versions":[{"status":"affected","version":"0","lessThan":"2.4.0","versionType":"semver"}],"packageURL":"pkg:composer/venturedrake/laravel-crm","collectionURL":"https://packagist.org","defaultStatus":"unaffected"}],"modified":"2026-10-14T20:20:11.778Z","provider":"cve","references":["https://github.com/venturedrake/laravel-crm/issues/79","https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Http/Controllers/UserController.php#L87-L94","https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Livewire/Users/UserIndex.php#L83-L90","https://github.com/venturedrake/laravel-crm/commit/d64b59fb9f7355e1be9951fbcc5f54ed715dc212","https://github.com/venturedrake/laravel-crm/commit/27bd5081004913660ccb3e0181b351a2e4ded104","https://github.com/venturedrake/laravel-crm/releases/tag/2.4.0","https://github.com/venturedrake/laravel-crm","https://www.vulncheck.com/advisories/venturedrake-laravel-crm-before-2.4.0-privilege-escalation-via-unscoped-role-assignment"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-110630","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T20:20:04.862530Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T20:20:11.778Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-14T14:17:04.557Z"}}},"related_cves":[{"value":"CVE-2026-110630","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:c034b44f-39e1-4492-9057-4fbfcd6a32df","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110630","advisory_id":"c034b44f-39e1-4492-9057-4fbfcd6a32df","event_types":["advisory"],"published_at":"2026-10-25T06:14:25.65957+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-14T14:17:04.557+00:00","detail_url":"/events/23149"}]}},{"id":23008,"cve_ids":["CVE-2026-110629"],"payload":{"kind":"advisory","title":"VentureDrake Laravel CRM before 2.4.0 Missing Authorization via Livewire Actions","summary":"VentureDrake Laravel CRM before 2.4.0 contains a missing authorization vulnerability that allows authenticated users to bypass Spatie role permissions through Livewire action methods. Read-only users can invoke delete, won, lost or reopen methods on components like DealIndex, or use unguarded Activities and Products routes, to modify deals, quotes, orders and invoices.","evidence":"cve:CVE-2026-110629","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-110629","aliases":["CVE-2026-110629"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"repo":"https://github.com/venturedrake/laravel-crm","vendor":"venturedrake","product":"laravel-crm","versions":[{"status":"affected","version":"0","lessThan":"2.4.0","versionType":"semver"}],"packageURL":"pkg:composer/venturedrake/laravel-crm","collectionURL":"https://packagist.org","defaultStatus":"unaffected"}],"modified":"2026-10-14T17:32:32.663Z","provider":"cve","references":["https://github.com/venturedrake/laravel-crm/issues/79","https://github.com/venturedrake/laravel-crm/issues/80","https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Livewire/Deals/DealIndex.php#L125-L170","https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Http/routes.php#L573-L581","https://github.com/venturedrake/laravel-crm/commit/1a280cb22fc006f63fb96fe540dc4d651a8fb0a8","https://github.com/venturedrake/laravel-crm/commit/cc41264eff5563f470984b8d2cfcc9ab4583c586","https://github.com/venturedrake/laravel-crm/commit/049fc966029234a6d0f02b69efeabdb16e35bbb0","https://github.com/venturedrake/laravel-crm/commit/78dbf4e41afe48def4037c69d5dd7a34820122c3","https://github.com/venturedrake/laravel-crm/releases/tag/2.4.0","https://github.com/venturedrake/laravel-crm","https://www.vulncheck.com/advisories/venturedrake-laravel-crm-before-2.4.0-missing-authorization-via-livewire-actions"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-110629","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T16:22:47.941064Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T17:32:32.663Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-14T14:17:03.868Z"}}},"related_cves":[{"value":"CVE-2026-110629","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:b971503a-5fee-4ac4-b4ff-f9abf4bdd262","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110629","advisory_id":"b971503a-5fee-4ac4-b4ff-f9abf4bdd262","event_types":["advisory"],"published_at":"2026-10-25T06:08:08.718614+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-14T14:17:03.868+00:00","detail_url":"/advisories/advisory%3Ab971503a-5fee-4ac4-b4ff-f9abf4bdd262","group":{"id":"advisory:b971503a-5fee-4ac4-b4ff-f9abf4bdd262","revision":1,"primary_event_id":22842,"change":"published","superseded_by":[],"changed":{"id":22842,"cve_ids":["CVE-2026-110629"],"payload":{"kind":"advisory","title":"VentureDrake Laravel CRM before 2.4.0 Missing Authorization via Livewire Actions","summary":"VentureDrake Laravel CRM before 2.4.0 contains a missing authorization vulnerability that allows authenticated users to bypass Spatie role permissions through Livewire action methods. Read-only users can invoke delete, won, lost or reopen methods on components like DealIndex, or use unguarded Activities and Products routes, to modify deals, quotes, orders and invoices.","evidence":"cve:CVE-2026-110629","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-110629","aliases":["CVE-2026-110629"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"repo":"https://github.com/venturedrake/laravel-crm","vendor":"venturedrake","product":"laravel-crm","versions":[{"status":"affected","version":"0","lessThan":"2.4.0","versionType":"semver"}],"packageURL":"pkg:composer/venturedrake/laravel-crm","collectionURL":"https://packagist.org","defaultStatus":"unaffected"}],"modified":"2026-10-14T17:32:32.663Z","provider":"cve","references":["https://github.com/venturedrake/laravel-crm/issues/79","https://github.com/venturedrake/laravel-crm/issues/80","https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Livewire/Deals/DealIndex.php#L125-L170","https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Http/routes.php#L573-L581","https://github.com/venturedrake/laravel-crm/commit/1a280cb22fc006f63fb96fe540dc4d651a8fb0a8","https://github.com/venturedrake/laravel-crm/commit/cc41264eff5563f470984b8d2cfcc9ab4583c586","https://github.com/venturedrake/laravel-crm/commit/049fc966029234a6d0f02b69efeabdb16e35bbb0","https://github.com/venturedrake/laravel-crm/commit/78dbf4e41afe48def4037c69d5dd7a34820122c3","https://github.com/venturedrake/laravel-crm/releases/tag/2.4.0","https://github.com/venturedrake/laravel-crm","https://www.vulncheck.com/advisories/venturedrake-laravel-crm-before-2.4.0-missing-authorization-via-livewire-actions"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-110629","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T16:22:47.941064Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T17:32:32.663Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-14T14:17:03.868Z"}}},"related_cves":[{"value":"CVE-2026-110629","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:b971503a-5fee-4ac4-b4ff-f9abf4bdd262","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110629","advisory_id":"b971503a-5fee-4ac4-b4ff-f9abf4bdd262","event_types":["advisory"],"published_at":"2026-10-25T06:08:08.718614+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-14T14:17:03.868+00:00","detail_url":"/events/22842"},"members":[{"id":22842,"cve_ids":["CVE-2026-110629"],"payload":{"kind":"advisory","title":"VentureDrake Laravel CRM before 2.4.0 Missing Authorization via Livewire Actions","summary":"VentureDrake Laravel CRM before 2.4.0 contains a missing authorization vulnerability that allows authenticated users to bypass Spatie role permissions through Livewire action methods. Read-only users can invoke delete, won, lost or reopen methods on components like DealIndex, or use unguarded Activities and Products routes, to modify deals, quotes, orders and invoices.","evidence":"cve:CVE-2026-110629","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-110629","aliases":["CVE-2026-110629"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"repo":"https://github.com/venturedrake/laravel-crm","vendor":"venturedrake","product":"laravel-crm","versions":[{"status":"affected","version":"0","lessThan":"2.4.0","versionType":"semver"}],"packageURL":"pkg:composer/venturedrake/laravel-crm","collectionURL":"https://packagist.org","defaultStatus":"unaffected"}],"modified":"2026-10-14T17:32:32.663Z","provider":"cve","references":["https://github.com/venturedrake/laravel-crm/issues/79","https://github.com/venturedrake/laravel-crm/issues/80","https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Livewire/Deals/DealIndex.php#L125-L170","https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Http/routes.php#L573-L581","https://github.com/venturedrake/laravel-crm/commit/1a280cb22fc006f63fb96fe540dc4d651a8fb0a8","https://github.com/venturedrake/laravel-crm/commit/cc41264eff5563f470984b8d2cfcc9ab4583c586","https://github.com/venturedrake/laravel-crm/commit/049fc966029234a6d0f02b69efeabdb16e35bbb0","https://github.com/venturedrake/laravel-crm/commit/78dbf4e41afe48def4037c69d5dd7a34820122c3","https://github.com/venturedrake/laravel-crm/releases/tag/2.4.0","https://github.com/venturedrake/laravel-crm","https://www.vulncheck.com/advisories/venturedrake-laravel-crm-before-2.4.0-missing-authorization-via-livewire-actions"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-110629","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T16:22:47.941064Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T17:32:32.663Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-14T14:17:03.868Z"}}},"related_cves":[{"value":"CVE-2026-110629","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:b971503a-5fee-4ac4-b4ff-f9abf4bdd262","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110629","advisory_id":"b971503a-5fee-4ac4-b4ff-f9abf4bdd262","event_types":["advisory"],"published_at":"2026-10-25T06:08:08.718614+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-14T14:17:03.868+00:00","detail_url":"/events/22842"}]}},{"id":4942,"cve_ids":["CVE-2026-100885"],"payload":{"kind":"advisory","title":"Krayin laravel-crm admin-config-setup API Endpoint CanInstall.php authorization","summary":"A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the file packages/Webkul/Installer/src/Http/Middleware/CanInstall.php of the component admin-config-setup API Endpoint. The manipulation results in authorization bypass. The attack may be launched remotely. The exploit has been made public and could be used. Upgrading to version 2.2.5 mitigates this issue. The patch is identified as 89f2916b6a46ff91bd1999ce38158fa0de8b9490. Upgrading the affected component is recommended.","evidence":"cve:CVE-2026-100885","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100885","aliases":["CVE-2026-100885"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:krayin:laravel-crm:*:*:*:*:*:*:*:*"],"vendor":"Krayin","modules":["admin-config-setup API Endpoint"],"product":"laravel-crm","versions":[{"status":"affected","version":"2.2.0"},{"status":"affected","version":"2.2.1"},{"status":"affected","version":"2.2.2"},{"status":"affected","version":"2.2.3"},{"status":"affected","version":"2.2.4"},{"status":"unaffected","version":"2.2.5"}]}],"modified":"2026-09-30T22:15:32.020Z","provider":"cve","references":["https://vuldb.com/vuln/410815","https://vuldb.com/vuln/410815/cti","https://vuldb.com/cve/CVE-2026-100885","https://vuldb.com/submit/916597","https://github.com/carlosalbertotuma/advisory/blob/main/advisory-07-Unauthenticated-InstallerBypass.md","https://github.com/krayin/laravel-crm/pull/2614","https://github.com/krayin/laravel-crm/commit/89f2916b6a46ff91bd1999ce38158fa0de8b9490","https://github.com/krayin/laravel-crm/releases/tag/v2.2.5","https://github.com/krayin/laravel-crm/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100885","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-30T22:15:22.727657Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T22:15:32.020Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-27T22:45:19.897Z"}}},"related_cves":[{"value":"CVE-2026-100885","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:4daeefc8-ce19-4378-bb37-aeb3778f6211","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100885","advisory_id":"4daeefc8-ce19-4378-bb37-aeb3778f6211","event_types":["advisory"],"published_at":"2026-10-24T22:00:55.849789+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-27T22:45:19.897+00:00","detail_url":"/advisories/advisory%3A4daeefc8-ce19-4378-bb37-aeb3778f6211","group":{"id":"advisory:4daeefc8-ce19-4378-bb37-aeb3778f6211","revision":1,"primary_event_id":4966,"change":"published","superseded_by":[],"changed":{"id":4966,"cve_ids":["CVE-2026-100885"],"payload":{"kind":"advisory","title":"Krayin laravel-crm admin-config-setup API Endpoint CanInstall.php authorization","summary":"A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the file packages/Webkul/Installer/src/Http/Middleware/CanInstall.php of the component admin-config-setup API Endpoint. The manipulation results in authorization bypass. The attack may be launched remotely. The exploit has been made public and could be used. Upgrading to version 2.2.5 mitigates this issue. The patch is identified as 89f2916b6a46ff91bd1999ce38158fa0de8b9490. Upgrading the affected component is recommended.","evidence":"cve:CVE-2026-100885","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100885","aliases":["CVE-2026-100885"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:krayin:laravel-crm:*:*:*:*:*:*:*:*"],"vendor":"Krayin","modules":["admin-config-setup API Endpoint"],"product":"laravel-crm","versions":[{"status":"affected","version":"2.2.0"},{"status":"affected","version":"2.2.1"},{"status":"affected","version":"2.2.2"},{"status":"affected","version":"2.2.3"},{"status":"affected","version":"2.2.4"},{"status":"unaffected","version":"2.2.5"}]}],"modified":"2026-09-30T22:15:32.020Z","provider":"cve","references":["https://vuldb.com/vuln/410815","https://vuldb.com/vuln/410815/cti","https://vuldb.com/cve/CVE-2026-100885","https://vuldb.com/submit/916597","https://github.com/carlosalbertotuma/advisory/blob/main/advisory-07-Unauthenticated-InstallerBypass.md","https://github.com/krayin/laravel-crm/pull/2614","https://github.com/krayin/laravel-crm/commit/89f2916b6a46ff91bd1999ce38158fa0de8b9490","https://github.com/krayin/laravel-crm/releases/tag/v2.2.5","https://github.com/krayin/laravel-crm/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100885","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-30T22:15:22.727657Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T22:15:32.020Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-27T22:45:19.897Z"}}},"related_cves":[{"value":"CVE-2026-100885","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:4daeefc8-ce19-4378-bb37-aeb3778f6211","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100885","advisory_id":"4daeefc8-ce19-4378-bb37-aeb3778f6211","event_types":["advisory"],"published_at":"2026-10-24T22:00:55.849789+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-27T22:45:19.897+00:00","detail_url":"/events/4966"},"members":[{"id":4966,"cve_ids":["CVE-2026-100885"],"payload":{"kind":"advisory","title":"Krayin laravel-crm admin-config-setup API Endpoint CanInstall.php authorization","summary":"A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the file packages/Webkul/Installer/src/Http/Middleware/CanInstall.php of the component admin-config-setup API Endpoint. The manipulation results in authorization bypass. The attack may be launched remotely. The exploit has been made public and could be used. Upgrading to version 2.2.5 mitigates this issue. The patch is identified as 89f2916b6a46ff91bd1999ce38158fa0de8b9490. Upgrading the affected component is recommended.","evidence":"cve:CVE-2026-100885","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100885","aliases":["CVE-2026-100885"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:krayin:laravel-crm:*:*:*:*:*:*:*:*"],"vendor":"Krayin","modules":["admin-config-setup API Endpoint"],"product":"laravel-crm","versions":[{"status":"affected","version":"2.2.0"},{"status":"affected","version":"2.2.1"},{"status":"affected","version":"2.2.2"},{"status":"affected","version":"2.2.3"},{"status":"affected","version":"2.2.4"},{"status":"unaffected","version":"2.2.5"}]}],"modified":"2026-09-30T22:15:32.020Z","provider":"cve","references":["https://vuldb.com/vuln/410815","https://vuldb.com/vuln/410815/cti","https://vuldb.com/cve/CVE-2026-100885","https://vuldb.com/submit/916597","https://github.com/carlosalbertotuma/advisory/blob/main/advisory-07-Unauthenticated-InstallerBypass.md","https://github.com/krayin/laravel-crm/pull/2614","https://github.com/krayin/laravel-crm/commit/89f2916b6a46ff91bd1999ce38158fa0de8b9490","https://github.com/krayin/laravel-crm/releases/tag/v2.2.5","https://github.com/krayin/laravel-crm/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100885","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-30T22:15:22.727657Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T22:15:32.020Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-27T22:45:19.897Z"}}},"related_cves":[{"value":"CVE-2026-100885","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:4daeefc8-ce19-4378-bb37-aeb3778f6211","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100885","advisory_id":"4daeefc8-ce19-4378-bb37-aeb3778f6211","event_types":["advisory"],"published_at":"2026-10-24T22:00:55.849789+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-27T22:45:19.897+00:00","detail_url":"/events/4966"}]}},{"id":4940,"cve_ids":["CVE-2026-100882"],"payload":{"kind":"advisory","title":"Krayin laravel-crm Admin Settings Endpoint index.blade.php cross site scripting","summary":"A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Webkul/Admin/src/Resources/views/components/layouts/index.blade.php of the component Admin Settings Endpoint. Performing a manipulation of the argument general.settings.footer.label results in cross site scripting. The attack can be initiated remotely. The exploit is now public and may be used. Upgrading to version 2.2.6 is recommended to address this issue. The patch is named 6dbcf75b30dbd169ee81b7e9e00368099124efeb. You should upgrade the affected component.","evidence":"cve:CVE-2026-100882","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100882","aliases":["CVE-2026-100882"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":4.8,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":2.4,"baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":2.4,"baseSeverity":"LOW","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":3.3,"vectorString":"AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:OF/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:krayin:laravel-crm:*:*:*:*:*:*:*:*"],"vendor":"Krayin","modules":["Admin Settings Endpoint"],"product":"laravel-crm","versions":[{"status":"affected","version":"2.2.0"},{"status":"affected","version":"2.2.1"},{"status":"affected","version":"2.2.2"},{"status":"affected","version":"2.2.3"},{"status":"affected","version":"2.2.4"},{"status":"affected","version":"2.2.5"},{"status":"unaffected","version":"2.2.6"}]}],"modified":"2026-09-30T22:14:49.571Z","provider":"cve","references":["https://vuldb.com/vuln/410812","https://vuldb.com/vuln/410812/cti","https://vuldb.com/cve/CVE-2026-100882","https://vuldb.com/submit/916088","https://github.com/krayin/laravel-crm/issues/2622","https://github.com/krayin/laravel-crm/pull/2625","https://github.com/carlosalbertotuma/advisory/blob/main/advisory-04-stored-xss-via-footer.md","https://github.com/krayin/laravel-crm/commit/6dbcf75b30dbd169ee81b7e9e00368099124efeb","https://github.com/krayin/laravel-crm/releases/tag/v2.2.6","https://github.com/krayin/laravel-crm/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100882","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-30T22:14:40.963385Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T22:14:49.571Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-27T22:00:13.969Z"}}},"related_cves":[{"value":"CVE-2026-100882","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:87ae4c2b-abc1-4860-bed7-ceb14f9d2c36","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100882","advisory_id":"87ae4c2b-abc1-4860-bed7-ceb14f9d2c36","event_types":["advisory"],"published_at":"2026-10-24T22:00:54.684722+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-27T22:00:13.969+00:00","detail_url":"/advisories/advisory%3A87ae4c2b-abc1-4860-bed7-ceb14f9d2c36","group":{"id":"advisory:87ae4c2b-abc1-4860-bed7-ceb14f9d2c36","revision":1,"primary_event_id":4964,"change":"published","superseded_by":[],"changed":{"id":4964,"cve_ids":["CVE-2026-100882"],"payload":{"kind":"advisory","title":"Krayin laravel-crm Admin Settings Endpoint index.blade.php cross site scripting","summary":"A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Webkul/Admin/src/Resources/views/components/layouts/index.blade.php of the component Admin Settings Endpoint. Performing a manipulation of the argument general.settings.footer.label results in cross site scripting. The attack can be initiated remotely. The exploit is now public and may be used. Upgrading to version 2.2.6 is recommended to address this issue. The patch is named 6dbcf75b30dbd169ee81b7e9e00368099124efeb. You should upgrade the affected component.","evidence":"cve:CVE-2026-100882","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100882","aliases":["CVE-2026-100882"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":4.8,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":2.4,"baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":2.4,"baseSeverity":"LOW","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":3.3,"vectorString":"AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:OF/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:krayin:laravel-crm:*:*:*:*:*:*:*:*"],"vendor":"Krayin","modules":["Admin Settings Endpoint"],"product":"laravel-crm","versions":[{"status":"affected","version":"2.2.0"},{"status":"affected","version":"2.2.1"},{"status":"affected","version":"2.2.2"},{"status":"affected","version":"2.2.3"},{"status":"affected","version":"2.2.4"},{"status":"affected","version":"2.2.5"},{"status":"unaffected","version":"2.2.6"}]}],"modified":"2026-09-30T22:14:49.571Z","provider":"cve","references":["https://vuldb.com/vuln/410812","https://vuldb.com/vuln/410812/cti","https://vuldb.com/cve/CVE-2026-100882","https://vuldb.com/submit/916088","https://github.com/krayin/laravel-crm/issues/2622","https://github.com/krayin/laravel-crm/pull/2625","https://github.com/carlosalbertotuma/advisory/blob/main/advisory-04-stored-xss-via-footer.md","https://github.com/krayin/laravel-crm/commit/6dbcf75b30dbd169ee81b7e9e00368099124efeb","https://github.com/krayin/laravel-crm/releases/tag/v2.2.6","https://github.com/krayin/laravel-crm/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100882","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-30T22:14:40.963385Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T22:14:49.571Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-27T22:00:13.969Z"}}},"related_cves":[{"value":"CVE-2026-100882","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:87ae4c2b-abc1-4860-bed7-ceb14f9d2c36","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100882","advisory_id":"87ae4c2b-abc1-4860-bed7-ceb14f9d2c36","event_types":["advisory"],"published_at":"2026-10-24T22:00:54.684722+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-27T22:00:13.969+00:00","detail_url":"/events/4964"},"members":[{"id":4964,"cve_ids":["CVE-2026-100882"],"payload":{"kind":"advisory","title":"Krayin laravel-crm Admin Settings Endpoint index.blade.php cross site scripting","summary":"A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Webkul/Admin/src/Resources/views/components/layouts/index.blade.php of the component Admin Settings Endpoint. Performing a manipulation of the argument general.settings.footer.label results in cross site scripting. The attack can be initiated remotely. The exploit is now public and may be used. Upgrading to version 2.2.6 is recommended to address this issue. The patch is named 6dbcf75b30dbd169ee81b7e9e00368099124efeb. You should upgrade the affected component.","evidence":"cve:CVE-2026-100882","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100882","aliases":["CVE-2026-100882"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":4.8,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":2.4,"baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":2.4,"baseSeverity":"LOW","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":3.3,"vectorString":"AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:OF/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:krayin:laravel-crm:*:*:*:*:*:*:*:*"],"vendor":"Krayin","modules":["Admin Settings Endpoint"],"product":"laravel-crm","versions":[{"status":"affected","version":"2.2.0"},{"status":"affected","version":"2.2.1"},{"status":"affected","version":"2.2.2"},{"status":"affected","version":"2.2.3"},{"status":"affected","version":"2.2.4"},{"status":"affected","version":"2.2.5"},{"status":"unaffected","version":"2.2.6"}]}],"modified":"2026-09-30T22:14:49.571Z","provider":"cve","references":["https://vuldb.com/vuln/410812","https://vuldb.com/vuln/410812/cti","https://vuldb.com/cve/CVE-2026-100882","https://vuldb.com/submit/916088","https://github.com/krayin/laravel-crm/issues/2622","https://github.com/krayin/laravel-crm/pull/2625","https://github.com/carlosalbertotuma/advisory/blob/main/advisory-04-stored-xss-via-footer.md","https://github.com/krayin/laravel-crm/commit/6dbcf75b30dbd169ee81b7e9e00368099124efeb","https://github.com/krayin/laravel-crm/releases/tag/v2.2.6","https://github.com/krayin/laravel-crm/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100882","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-30T22:14:40.963385Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T22:14:49.571Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-27T22:00:13.969Z"}}},"related_cves":[{"value":"CVE-2026-100882","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:87ae4c2b-abc1-4860-bed7-ceb14f9d2c36","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100882","advisory_id":"87ae4c2b-abc1-4860-bed7-ceb14f9d2c36","event_types":["advisory"],"published_at":"2026-10-24T22:00:54.684722+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-27T22:00:13.969+00:00","detail_url":"/events/4964"}]}},{"id":4736,"cve_ids":["CVE-2026-48541"],"payload":{"kind":"advisory","title":"Krayin CRM 2.2.6 Stored Template Injection XSS via Contact Name Field","summary":"Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the person name field. Attackers can craft a person name containing double-brace template syntax that reaches the Vue template compiler, enabling prototype chain traversal to retrieve the Function constructor and execute attacker-supplied JavaScript in the application origin for every user who views the affected person record.","evidence":"cve:CVE-2026-48541","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-48541","aliases":["CVE-2026-48541"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.1,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"LOW","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"2.2.6"}],"packageURL":"pkg:github/krayin/laravel-crm","defaultStatus":"unknown"}],"modified":"2026-09-30T17:29:32.519Z","provider":"cve","references":["https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-48541","https://www.vulncheck.com/advisories/krayin-crm-stored-template-injection-xss-via-contact-name-field"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-48541","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-30T15:43:46.646473Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T17:29:32.519Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-24T19:31:13.120Z"}}},"related_cves":[{"value":"CVE-2026-48541","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:2837f299-4a33-4679-8c7c-93690b096267","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-48541","advisory_id":"2837f299-4a33-4679-8c7c-93690b096267","event_types":["advisory"],"published_at":"2026-10-24T21:56:49.952639+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T19:31:13.12+00:00","detail_url":"/advisories/advisory%3A2837f299-4a33-4679-8c7c-93690b096267","group":{"id":"advisory:2837f299-4a33-4679-8c7c-93690b096267","revision":1,"primary_event_id":4754,"change":"published","superseded_by":[],"changed":{"id":4754,"cve_ids":["CVE-2026-48541"],"payload":{"kind":"advisory","title":"Krayin CRM 2.2.6 Stored Template Injection XSS via Contact Name Field","summary":"Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the person name field. Attackers can craft a person name containing double-brace template syntax that reaches the Vue template compiler, enabling prototype chain traversal to retrieve the Function constructor and execute attacker-supplied JavaScript in the application origin for every user who views the affected person record.","evidence":"cve:CVE-2026-48541","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-48541","aliases":["CVE-2026-48541"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.1,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"LOW","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"2.2.6"}],"packageURL":"pkg:github/krayin/laravel-crm","defaultStatus":"unknown"}],"modified":"2026-09-30T17:29:32.519Z","provider":"cve","references":["https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-48541","https://www.vulncheck.com/advisories/krayin-crm-stored-template-injection-xss-via-contact-name-field"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-48541","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-30T15:43:46.646473Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T17:29:32.519Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-24T19:31:13.120Z"}}},"related_cves":[{"value":"CVE-2026-48541","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:2837f299-4a33-4679-8c7c-93690b096267","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-48541","advisory_id":"2837f299-4a33-4679-8c7c-93690b096267","event_types":["advisory"],"published_at":"2026-10-24T21:56:49.952639+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T19:31:13.12+00:00","detail_url":"/events/4754"},"members":[{"id":4754,"cve_ids":["CVE-2026-48541"],"payload":{"kind":"advisory","title":"Krayin CRM 2.2.6 Stored Template Injection XSS via Contact Name Field","summary":"Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the person name field. Attackers can craft a person name containing double-brace template syntax that reaches the Vue template compiler, enabling prototype chain traversal to retrieve the Function constructor and execute attacker-supplied JavaScript in the application origin for every user who views the affected person record.","evidence":"cve:CVE-2026-48541","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-48541","aliases":["CVE-2026-48541"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.1,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"LOW","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"2.2.6"}],"packageURL":"pkg:github/krayin/laravel-crm","defaultStatus":"unknown"}],"modified":"2026-09-30T17:29:32.519Z","provider":"cve","references":["https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-48541","https://www.vulncheck.com/advisories/krayin-crm-stored-template-injection-xss-via-contact-name-field"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-48541","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-30T15:43:46.646473Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T17:29:32.519Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-24T19:31:13.120Z"}}},"related_cves":[{"value":"CVE-2026-48541","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:2837f299-4a33-4679-8c7c-93690b096267","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-48541","advisory_id":"2837f299-4a33-4679-8c7c-93690b096267","event_types":["advisory"],"published_at":"2026-10-24T21:56:49.952639+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T19:31:13.12+00:00","detail_url":"/events/4754"}]}},{"id":4082,"cve_ids":["CVE-2026-97896"],"payload":{"kind":"advisory","title":"krayin laravel-crm Upload Functionality ConfigurationForm.php rules cross site scripting","summary":"A vulnerability was identified in krayin laravel-crm up to 2.2.5. This vulnerability affects the function ConfigurationForm::rules of the file packages/Webkul/Admin/src/Http/Requests/ConfigurationForm.php of the component Upload Functionality. The manipulation leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. Upgrading to version 2.2.6 is able to resolve this issue. The identifier of the patch is b9836530ec9f5ef0f51653bb0cbbc47ef7184f51. It is advisable to upgrade the affected component.","evidence":"cve:CVE-2026-97896","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-97896","aliases":["CVE-2026-97896"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.1,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":3.5,"baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":3.5,"baseSeverity":"LOW","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":4,"vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:OF/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:krayin:laravel-crm:*:*:*:*:*:*:*:*"],"vendor":"krayin","modules":["Upload Functionality"],"product":"laravel-crm","versions":[{"status":"affected","version":"2.2.0"},{"status":"affected","version":"2.2.1"},{"status":"affected","version":"2.2.2"},{"status":"affected","version":"2.2.3"},{"status":"affected","version":"2.2.4"},{"status":"affected","version":"2.2.5"},{"status":"unaffected","version":"2.2.6"}]}],"modified":"2026-09-30T00:01:55.385Z","provider":"cve","references":["https://vuldb.com/vuln/409908","https://vuldb.com/vuln/409908/cti","https://vuldb.com/cve/CVE-2026-97896","https://vuldb.com/submit/915399","https://github.com/krayin/laravel-crm/issues/2617","https://github.com/krayin/laravel-crm/pull/2620","https://github.com/carlosalbertotuma/advisory/blob/main/advisory-02-config-upload-xss.md","https://github.com/krayin/laravel-crm/commit/b9836530ec9f5ef0f51653bb0cbbc47ef7184f51","https://github.com/krayin/laravel-crm/releases/tag/v2.2.6","https://github.com/krayin/laravel-crm/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-97896","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-30T00:01:46.346618Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T00:01:55.385Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-25T18:30:19.532Z"}}},"related_cves":[{"value":"CVE-2026-97896","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:1bd53f43-e66e-4c58-be32-3f24e3bf8e8a","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97896","advisory_id":"1bd53f43-e66e-4c58-be32-3f24e3bf8e8a","event_types":["advisory"],"published_at":"2026-10-24T21:45:51.487742+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-25T18:30:19.532+00:00","detail_url":"/advisories/advisory%3A1bd53f43-e66e-4c58-be32-3f24e3bf8e8a","group":{"id":"advisory:1bd53f43-e66e-4c58-be32-3f24e3bf8e8a","revision":1,"primary_event_id":4097,"change":"published","superseded_by":[],"changed":{"id":4097,"cve_ids":["CVE-2026-97896"],"payload":{"kind":"advisory","title":"krayin laravel-crm Upload Functionality ConfigurationForm.php rules cross site scripting","summary":"A vulnerability was identified in krayin laravel-crm up to 2.2.5. This vulnerability affects the function ConfigurationForm::rules of the file packages/Webkul/Admin/src/Http/Requests/ConfigurationForm.php of the component Upload Functionality. The manipulation leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. Upgrading to version 2.2.6 is able to resolve this issue. The identifier of the patch is b9836530ec9f5ef0f51653bb0cbbc47ef7184f51. It is advisable to upgrade the affected component.","evidence":"cve:CVE-2026-97896","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-97896","aliases":["CVE-2026-97896"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.1,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":3.5,"baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":3.5,"baseSeverity":"LOW","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":4,"vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:OF/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:krayin:laravel-crm:*:*:*:*:*:*:*:*"],"vendor":"krayin","modules":["Upload Functionality"],"product":"laravel-crm","versions":[{"status":"affected","version":"2.2.0"},{"status":"affected","version":"2.2.1"},{"status":"affected","version":"2.2.2"},{"status":"affected","version":"2.2.3"},{"status":"affected","version":"2.2.4"},{"status":"affected","version":"2.2.5"},{"status":"unaffected","version":"2.2.6"}]}],"modified":"2026-09-30T00:01:55.385Z","provider":"cve","references":["https://vuldb.com/vuln/409908","https://vuldb.com/vuln/409908/cti","https://vuldb.com/cve/CVE-2026-97896","https://vuldb.com/submit/915399","https://github.com/krayin/laravel-crm/issues/2617","https://github.com/krayin/laravel-crm/pull/2620","https://github.com/carlosalbertotuma/advisory/blob/main/advisory-02-config-upload-xss.md","https://github.com/krayin/laravel-crm/commit/b9836530ec9f5ef0f51653bb0cbbc47ef7184f51","https://github.com/krayin/laravel-crm/releases/tag/v2.2.6","https://github.com/krayin/laravel-crm/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-97896","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-30T00:01:46.346618Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T00:01:55.385Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-25T18:30:19.532Z"}}},"related_cves":[{"value":"CVE-2026-97896","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:1bd53f43-e66e-4c58-be32-3f24e3bf8e8a","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97896","advisory_id":"1bd53f43-e66e-4c58-be32-3f24e3bf8e8a","event_types":["advisory"],"published_at":"2026-10-24T21:45:51.487742+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-25T18:30:19.532+00:00","detail_url":"/events/4097"},"members":[{"id":4097,"cve_ids":["CVE-2026-97896"],"payload":{"kind":"advisory","title":"krayin laravel-crm Upload Functionality ConfigurationForm.php rules cross site scripting","summary":"A vulnerability was identified in krayin laravel-crm up to 2.2.5. This vulnerability affects the function ConfigurationForm::rules of the file packages/Webkul/Admin/src/Http/Requests/ConfigurationForm.php of the component Upload Functionality. The manipulation leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. Upgrading to version 2.2.6 is able to resolve this issue. The identifier of the patch is b9836530ec9f5ef0f51653bb0cbbc47ef7184f51. It is advisable to upgrade the affected component.","evidence":"cve:CVE-2026-97896","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-97896","aliases":["CVE-2026-97896"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.1,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":3.5,"baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":3.5,"baseSeverity":"LOW","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":4,"vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:OF/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:krayin:laravel-crm:*:*:*:*:*:*:*:*"],"vendor":"krayin","modules":["Upload Functionality"],"product":"laravel-crm","versions":[{"status":"affected","version":"2.2.0"},{"status":"affected","version":"2.2.1"},{"status":"affected","version":"2.2.2"},{"status":"affected","version":"2.2.3"},{"status":"affected","version":"2.2.4"},{"status":"affected","version":"2.2.5"},{"status":"unaffected","version":"2.2.6"}]}],"modified":"2026-09-30T00:01:55.385Z","provider":"cve","references":["https://vuldb.com/vuln/409908","https://vuldb.com/vuln/409908/cti","https://vuldb.com/cve/CVE-2026-97896","https://vuldb.com/submit/915399","https://github.com/krayin/laravel-crm/issues/2617","https://github.com/krayin/laravel-crm/pull/2620","https://github.com/carlosalbertotuma/advisory/blob/main/advisory-02-config-upload-xss.md","https://github.com/krayin/laravel-crm/commit/b9836530ec9f5ef0f51653bb0cbbc47ef7184f51","https://github.com/krayin/laravel-crm/releases/tag/v2.2.6","https://github.com/krayin/laravel-crm/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-97896","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-30T00:01:46.346618Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T00:01:55.385Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-25T18:30:19.532Z"}}},"related_cves":[{"value":"CVE-2026-97896","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:1bd53f43-e66e-4c58-be32-3f24e3bf8e8a","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97896","advisory_id":"1bd53f43-e66e-4c58-be32-3f24e3bf8e8a","event_types":["advisory"],"published_at":"2026-10-24T21:45:51.487742+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-25T18:30:19.532+00:00","detail_url":"/events/4097"}]}},{"id":3877,"cve_ids":["CVE-2026-97897"],"payload":{"kind":"advisory","title":"Krayin laravel-crm TinyMCE Media Upload Sanitizer.php cross site scripting","summary":"A security flaw has been discovered in Krayin laravel-crm up to 2.2.5. This issue affects some unknown processing of the file Sanitizer.php of the component TinyMCE Media Upload. The manipulation results in cross site scripting. The attack may be performed from remote. Upgrading to version 2.2.6 is capable of addressing this issue. The patch is identified as 734aa10ae6c2ffa4c96c8869a89aa66940e4d345. You should upgrade the affected component.","evidence":"cve:CVE-2026-97897","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-97897","aliases":["CVE-2026-97897"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.1,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X"}},{"cvssV3_1":{"version":"3.1","baseScore":3.5,"baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:X/RL:O/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":3.5,"baseSeverity":"LOW","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:X/RL:O/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":4,"vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N/E:ND/RL:OF/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:krayin:laravel-crm:*:*:*:*:*:*:*:*"],"vendor":"Krayin","modules":["TinyMCE Media Upload"],"product":"laravel-crm","versions":[{"status":"affected","version":"2.2.0"},{"status":"affected","version":"2.2.1"},{"status":"affected","version":"2.2.2"},{"status":"affected","version":"2.2.3"},{"status":"affected","version":"2.2.4"},{"status":"affected","version":"2.2.5"},{"status":"unaffected","version":"2.2.6"}]}],"modified":"2026-09-29T17:54:15.390Z","provider":"cve","references":["https://vuldb.com/vuln/409909","https://vuldb.com/vuln/409909/cti","https://vuldb.com/cve/CVE-2026-97897","https://vuldb.com/submit/915413","https://github.com/carlosalbertotuma/advisory/blob/main/advisory-03-stored-xss-tinymce-media-upload.md","https://github.com/krayin/laravel-crm/pull/2639","https://github.com/krayin/laravel-crm/commit/734aa10ae6c2ffa4c96c8869a89aa66940e4d345","https://github.com/krayin/laravel-crm/releases/tag/v2.2.6","https://github.com/krayin/laravel-crm/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-97897","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T17:52:12.671880Z"}}}],"references":[{"url":"https://github.com/carlosalbertotuma/advisory/blob/main/advisory-03-stored-xss-tinymce-media-upload.md","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T17:54:15.390Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-25T18:45:09.156Z"}}},"related_cves":[{"value":"CVE-2026-97897","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:2606cd44-3b2d-4dab-a2f1-1854e3fef198","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97897","advisory_id":"2606cd44-3b2d-4dab-a2f1-1854e3fef198","event_types":["advisory"],"published_at":"2026-10-24T21:42:51.559068+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-25T18:45:09.156+00:00","detail_url":"/advisories/advisory%3A2606cd44-3b2d-4dab-a2f1-1854e3fef198","group":{"id":"advisory:2606cd44-3b2d-4dab-a2f1-1854e3fef198","revision":1,"primary_event_id":3891,"change":"published","superseded_by":[],"changed":{"id":3891,"cve_ids":["CVE-2026-97897"],"payload":{"kind":"advisory","title":"Krayin laravel-crm TinyMCE Media Upload Sanitizer.php cross site scripting","summary":"A security flaw has been discovered in Krayin laravel-crm up to 2.2.5. This issue affects some unknown processing of the file Sanitizer.php of the component TinyMCE Media Upload. The manipulation results in cross site scripting. The attack may be performed from remote. Upgrading to version 2.2.6 is capable of addressing this issue. The patch is identified as 734aa10ae6c2ffa4c96c8869a89aa66940e4d345. You should upgrade the affected component.","evidence":"cve:CVE-2026-97897","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-97897","aliases":["CVE-2026-97897"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.1,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X"}},{"cvssV3_1":{"version":"3.1","baseScore":3.5,"baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:X/RL:O/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":3.5,"baseSeverity":"LOW","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:X/RL:O/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":4,"vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N/E:ND/RL:OF/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:krayin:laravel-crm:*:*:*:*:*:*:*:*"],"vendor":"Krayin","modules":["TinyMCE Media Upload"],"product":"laravel-crm","versions":[{"status":"affected","version":"2.2.0"},{"status":"affected","version":"2.2.1"},{"status":"affected","version":"2.2.2"},{"status":"affected","version":"2.2.3"},{"status":"affected","version":"2.2.4"},{"status":"affected","version":"2.2.5"},{"status":"unaffected","version":"2.2.6"}]}],"modified":"2026-09-29T17:54:15.390Z","provider":"cve","references":["https://vuldb.com/vuln/409909","https://vuldb.com/vuln/409909/cti","https://vuldb.com/cve/CVE-2026-97897","https://vuldb.com/submit/915413","https://github.com/carlosalbertotuma/advisory/blob/main/advisory-03-stored-xss-tinymce-media-upload.md","https://github.com/krayin/laravel-crm/pull/2639","https://github.com/krayin/laravel-crm/commit/734aa10ae6c2ffa4c96c8869a89aa66940e4d345","https://github.com/krayin/laravel-crm/releases/tag/v2.2.6","https://github.com/krayin/laravel-crm/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-97897","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T17:52:12.671880Z"}}}],"references":[{"url":"https://github.com/carlosalbertotuma/advisory/blob/main/advisory-03-stored-xss-tinymce-media-upload.md","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T17:54:15.390Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-25T18:45:09.156Z"}}},"related_cves":[{"value":"CVE-2026-97897","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:2606cd44-3b2d-4dab-a2f1-1854e3fef198","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97897","advisory_id":"2606cd44-3b2d-4dab-a2f1-1854e3fef198","event_types":["advisory"],"published_at":"2026-10-24T21:42:51.559068+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-25T18:45:09.156+00:00","detail_url":"/events/3891"},"members":[{"id":3891,"cve_ids":["CVE-2026-97897"],"payload":{"kind":"advisory","title":"Krayin laravel-crm TinyMCE Media Upload Sanitizer.php cross site scripting","summary":"A security flaw has been discovered in Krayin laravel-crm up to 2.2.5. This issue affects some unknown processing of the file Sanitizer.php of the component TinyMCE Media Upload. The manipulation results in cross site scripting. The attack may be performed from remote. Upgrading to version 2.2.6 is capable of addressing this issue. The patch is identified as 734aa10ae6c2ffa4c96c8869a89aa66940e4d345. You should upgrade the affected component.","evidence":"cve:CVE-2026-97897","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-97897","aliases":["CVE-2026-97897"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.1,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X"}},{"cvssV3_1":{"version":"3.1","baseScore":3.5,"baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:X/RL:O/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":3.5,"baseSeverity":"LOW","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:X/RL:O/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":4,"vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N/E:ND/RL:OF/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:krayin:laravel-crm:*:*:*:*:*:*:*:*"],"vendor":"Krayin","modules":["TinyMCE Media Upload"],"product":"laravel-crm","versions":[{"status":"affected","version":"2.2.0"},{"status":"affected","version":"2.2.1"},{"status":"affected","version":"2.2.2"},{"status":"affected","version":"2.2.3"},{"status":"affected","version":"2.2.4"},{"status":"affected","version":"2.2.5"},{"status":"unaffected","version":"2.2.6"}]}],"modified":"2026-09-29T17:54:15.390Z","provider":"cve","references":["https://vuldb.com/vuln/409909","https://vuldb.com/vuln/409909/cti","https://vuldb.com/cve/CVE-2026-97897","https://vuldb.com/submit/915413","https://github.com/carlosalbertotuma/advisory/blob/main/advisory-03-stored-xss-tinymce-media-upload.md","https://github.com/krayin/laravel-crm/pull/2639","https://github.com/krayin/laravel-crm/commit/734aa10ae6c2ffa4c96c8869a89aa66940e4d345","https://github.com/krayin/laravel-crm/releases/tag/v2.2.6","https://github.com/krayin/laravel-crm/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-97897","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T17:52:12.671880Z"}}}],"references":[{"url":"https://github.com/carlosalbertotuma/advisory/blob/main/advisory-03-stored-xss-tinymce-media-upload.md","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T17:54:15.390Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-25T18:45:09.156Z"}}},"related_cves":[{"value":"CVE-2026-97897","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:2606cd44-3b2d-4dab-a2f1-1854e3fef198","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97897","advisory_id":"2606cd44-3b2d-4dab-a2f1-1854e3fef198","event_types":["advisory"],"published_at":"2026-10-24T21:42:51.559068+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-25T18:45:09.156+00:00","detail_url":"/events/3891"}]}},{"id":3373,"cve_ids":["CVE-2026-48542"],"payload":{"kind":"advisory","title":"Krayin CRM 2.2.6 Stored Template Injection XSS via Product Name Field","summary":"Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the product name field. Attackers can craft a product name containing double-brace template syntax that reaches the Vue template compiler, enabling prototype chain traversal to retrieve the Function constructor and execute attacker-supplied JavaScript in the application origin for every user who views the affected product record.","evidence":"cve:CVE-2026-48542","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-48542","aliases":["CVE-2026-48542"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.1,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"LOW","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"2.2.6"}],"packageURL":"pkg:github/krayin/laravel-crm","defaultStatus":"unknown"}],"modified":"2026-09-29T03:10:37.689Z","provider":"cve","references":["https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-48541","https://www.vulncheck.com/advisories/krayin-crm-stored-template-injection-xss-via-product-name-field"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-48542","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T03:10:16.233438Z"}}}],"references":[{"url":"https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-48541","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T03:10:37.689Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-24T19:31:52.975Z"}}},"related_cves":[{"value":"CVE-2026-48542","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:781017b1-f9c1-43e2-98b3-f0089d9f2e94","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-48542","advisory_id":"781017b1-f9c1-43e2-98b3-f0089d9f2e94","event_types":["advisory"],"published_at":"2026-10-24T21:34:15.437708+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T19:31:52.975+00:00","detail_url":"/advisories/advisory%3A781017b1-f9c1-43e2-98b3-f0089d9f2e94","group":{"id":"advisory:781017b1-f9c1-43e2-98b3-f0089d9f2e94","revision":1,"primary_event_id":3390,"change":"published","superseded_by":[],"changed":{"id":3390,"cve_ids":["CVE-2026-48542"],"payload":{"kind":"advisory","title":"Krayin CRM 2.2.6 Stored Template Injection XSS via Product Name Field","summary":"Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the product name field. Attackers can craft a product name containing double-brace template syntax that reaches the Vue template compiler, enabling prototype chain traversal to retrieve the Function constructor and execute attacker-supplied JavaScript in the application origin for every user who views the affected product record.","evidence":"cve:CVE-2026-48542","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-48542","aliases":["CVE-2026-48542"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.1,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"LOW","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"2.2.6"}],"packageURL":"pkg:github/krayin/laravel-crm","defaultStatus":"unknown"}],"modified":"2026-09-29T03:10:37.689Z","provider":"cve","references":["https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-48541","https://www.vulncheck.com/advisories/krayin-crm-stored-template-injection-xss-via-product-name-field"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-48542","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T03:10:16.233438Z"}}}],"references":[{"url":"https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-48541","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T03:10:37.689Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-24T19:31:52.975Z"}}},"related_cves":[{"value":"CVE-2026-48542","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:781017b1-f9c1-43e2-98b3-f0089d9f2e94","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-48542","advisory_id":"781017b1-f9c1-43e2-98b3-f0089d9f2e94","event_types":["advisory"],"published_at":"2026-10-24T21:34:15.437708+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T19:31:52.975+00:00","detail_url":"/events/3390"},"members":[{"id":3390,"cve_ids":["CVE-2026-48542"],"payload":{"kind":"advisory","title":"Krayin CRM 2.2.6 Stored Template Injection XSS via Product Name Field","summary":"Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the product name field. Attackers can craft a product name containing double-brace template syntax that reaches the Vue template compiler, enabling prototype chain traversal to retrieve the Function constructor and execute attacker-supplied JavaScript in the application origin for every user who views the affected product record.","evidence":"cve:CVE-2026-48542","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-48542","aliases":["CVE-2026-48542"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.1,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"LOW","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"2.2.6"}],"packageURL":"pkg:github/krayin/laravel-crm","defaultStatus":"unknown"}],"modified":"2026-09-29T03:10:37.689Z","provider":"cve","references":["https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-48541","https://www.vulncheck.com/advisories/krayin-crm-stored-template-injection-xss-via-product-name-field"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-48542","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T03:10:16.233438Z"}}}],"references":[{"url":"https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-48541","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T03:10:37.689Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-24T19:31:52.975Z"}}},"related_cves":[{"value":"CVE-2026-48542","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:781017b1-f9c1-43e2-98b3-f0089d9f2e94","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-48542","advisory_id":"781017b1-f9c1-43e2-98b3-f0089d9f2e94","event_types":["advisory"],"published_at":"2026-10-24T21:34:15.437708+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T19:31:52.975+00:00","detail_url":"/events/3390"}]}},{"id":3061,"cve_ids":["CVE-2026-100883"],"payload":{"kind":"advisory","title":"Krayin laravel-crm acl.php access control","summary":"A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file packages/Webkul/Admin/src/Config/acl.php. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been published and may be used. Upgrading to version 2.2.6 is sufficient to fix this issue. This patch is called a399404a388d8ad2700a01349d0d98069c8e85a4. The affected component should be upgraded.","evidence":"cve:CVE-2026-100883","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100883","aliases":["CVE-2026-100883"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:krayin:laravel-crm:*:*:*:*:*:*:*:*"],"vendor":"Krayin","product":"laravel-crm","versions":[{"status":"affected","version":"2.2.0"},{"status":"affected","version":"2.2.1"},{"status":"affected","version":"2.2.2"},{"status":"affected","version":"2.2.3"},{"status":"affected","version":"2.2.4"},{"status":"affected","version":"2.2.5"},{"status":"unaffected","version":"2.2.6"}]}],"modified":"2026-09-28T13:19:18.207Z","provider":"cve","references":["https://vuldb.com/vuln/410813","https://vuldb.com/vuln/410813/cti","https://vuldb.com/cve/CVE-2026-100883","https://vuldb.com/submit/916128","https://github.com/krayin/laravel-crm/issues/2623","https://github.com/krayin/laravel-crm/pull/2626","https://github.com/carlosalbertotuma/advisory/blob/main/advisory-05-Missing-Function-Level%20Authorization.md","https://github.com/krayin/laravel-crm/commit/a399404a388d8ad2700a01349d0d98069c8e85a4","https://github.com/krayin/laravel-crm/releases/tag/v2.2.6","https://github.com/krayin/laravel-crm/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100883","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T13:17:44.298727Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T13:19:18.207Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-27T22:15:08.551Z"}}},"related_cves":[{"value":"CVE-2026-100883","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:d360e029-bf12-493a-851f-925519d76c08","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100883","advisory_id":"d360e029-bf12-493a-851f-925519d76c08","event_types":["advisory"],"published_at":"2026-10-24T21:28:58.736982+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-27T22:15:08.551+00:00","detail_url":"/advisories/advisory%3Ad360e029-bf12-493a-851f-925519d76c08","group":{"id":"advisory:d360e029-bf12-493a-851f-925519d76c08","revision":1,"primary_event_id":3064,"change":"published","superseded_by":[],"changed":{"id":3064,"cve_ids":["CVE-2026-100883"],"payload":{"kind":"advisory","title":"Krayin laravel-crm acl.php access control","summary":"A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file packages/Webkul/Admin/src/Config/acl.php. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been published and may be used. Upgrading to version 2.2.6 is sufficient to fix this issue. This patch is called a399404a388d8ad2700a01349d0d98069c8e85a4. The affected component should be upgraded.","evidence":"cve:CVE-2026-100883","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100883","aliases":["CVE-2026-100883"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:krayin:laravel-crm:*:*:*:*:*:*:*:*"],"vendor":"Krayin","product":"laravel-crm","versions":[{"status":"affected","version":"2.2.0"},{"status":"affected","version":"2.2.1"},{"status":"affected","version":"2.2.2"},{"status":"affected","version":"2.2.3"},{"status":"affected","version":"2.2.4"},{"status":"affected","version":"2.2.5"},{"status":"unaffected","version":"2.2.6"}]}],"modified":"2026-09-28T13:19:18.207Z","provider":"cve","references":["https://vuldb.com/vuln/410813","https://vuldb.com/vuln/410813/cti","https://vuldb.com/cve/CVE-2026-100883","https://vuldb.com/submit/916128","https://github.com/krayin/laravel-crm/issues/2623","https://github.com/krayin/laravel-crm/pull/2626","https://github.com/carlosalbertotuma/advisory/blob/main/advisory-05-Missing-Function-Level%20Authorization.md","https://github.com/krayin/laravel-crm/commit/a399404a388d8ad2700a01349d0d98069c8e85a4","https://github.com/krayin/laravel-crm/releases/tag/v2.2.6","https://github.com/krayin/laravel-crm/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100883","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T13:17:44.298727Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T13:19:18.207Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-27T22:15:08.551Z"}}},"related_cves":[{"value":"CVE-2026-100883","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:d360e029-bf12-493a-851f-925519d76c08","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100883","advisory_id":"d360e029-bf12-493a-851f-925519d76c08","event_types":["advisory"],"published_at":"2026-10-24T21:28:58.736982+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-27T22:15:08.551+00:00","detail_url":"/events/3064"},"members":[{"id":3064,"cve_ids":["CVE-2026-100883"],"payload":{"kind":"advisory","title":"Krayin laravel-crm acl.php access control","summary":"A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file packages/Webkul/Admin/src/Config/acl.php. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been published and may be used. Upgrading to version 2.2.6 is sufficient to fix this issue. This patch is called a399404a388d8ad2700a01349d0d98069c8e85a4. The affected component should be upgraded.","evidence":"cve:CVE-2026-100883","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100883","aliases":["CVE-2026-100883"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:krayin:laravel-crm:*:*:*:*:*:*:*:*"],"vendor":"Krayin","product":"laravel-crm","versions":[{"status":"affected","version":"2.2.0"},{"status":"affected","version":"2.2.1"},{"status":"affected","version":"2.2.2"},{"status":"affected","version":"2.2.3"},{"status":"affected","version":"2.2.4"},{"status":"affected","version":"2.2.5"},{"status":"unaffected","version":"2.2.6"}]}],"modified":"2026-09-28T13:19:18.207Z","provider":"cve","references":["https://vuldb.com/vuln/410813","https://vuldb.com/vuln/410813/cti","https://vuldb.com/cve/CVE-2026-100883","https://vuldb.com/submit/916128","https://github.com/krayin/laravel-crm/issues/2623","https://github.com/krayin/laravel-crm/pull/2626","https://github.com/carlosalbertotuma/advisory/blob/main/advisory-05-Missing-Function-Level%20Authorization.md","https://github.com/krayin/laravel-crm/commit/a399404a388d8ad2700a01349d0d98069c8e85a4","https://github.com/krayin/laravel-crm/releases/tag/v2.2.6","https://github.com/krayin/laravel-crm/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100883","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T13:17:44.298727Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T13:19:18.207Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-27T22:15:08.551Z"}}},"related_cves":[{"value":"CVE-2026-100883","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:d360e029-bf12-493a-851f-925519d76c08","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100883","advisory_id":"d360e029-bf12-493a-851f-925519d76c08","event_types":["advisory"],"published_at":"2026-10-24T21:28:58.736982+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-27T22:15:08.551+00:00","detail_url":"/events/3064"}]}},{"id":3041,"cve_ids":["CVE-2026-100884"],"payload":{"kind":"advisory","title":"Krayin laravel-crm attachment-download Endpoint acl.php resource injection","summary":"A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/Config/acl.php of the component attachment-download Endpoint. The manipulation of the argument ID leads to improper control of resource identifiers. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.2.6 is sufficient to resolve this issue. The identifier of the patch is 13d6988cda8d69ece45ee1890effc90a7f21cdc1. It is suggested to upgrade the affected component.","evidence":"cve:CVE-2026-100884","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100884","aliases":["CVE-2026-100884"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":4.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":4.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":4,"vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:OF/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:krayin:laravel-crm:*:*:*:*:*:*:*:*"],"vendor":"Krayin","modules":["attachment-download Endpoint"],"product":"laravel-crm","versions":[{"status":"affected","version":"2.2.0"},{"status":"affected","version":"2.2.1"},{"status":"affected","version":"2.2.2"},{"status":"affected","version":"2.2.3"},{"status":"affected","version":"2.2.4"},{"status":"affected","version":"2.2.5"},{"status":"unaffected","version":"2.2.6"}]}],"modified":"2026-09-28T12:54:26.833Z","provider":"cve","references":["https://vuldb.com/vuln/410814","https://vuldb.com/vuln/410814/cti","https://vuldb.com/cve/CVE-2026-100884","https://vuldb.com/submit/916218","https://github.com/krayin/laravel-crm/issues/2624","https://github.com/krayin/laravel-crm/pull/2627","https://github.com/carlosalbertotuma/advisory/blob/main/advisory-06-IDOR-Email-Attachment%20Download.md","https://github.com/krayin/laravel-crm/commit/13d6988cda8d69ece45ee1890effc90a7f21cdc1","https://github.com/krayin/laravel-crm/releases/tag/v2.2.6","https://github.com/krayin/laravel-crm/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100884","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T12:54:15.392910Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T12:54:26.833Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-27T22:30:14.286Z"}}},"related_cves":[{"value":"CVE-2026-100884","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:04c8dfd0-9db7-40cb-8ffd-a80b9fdb31f5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100884","advisory_id":"04c8dfd0-9db7-40cb-8ffd-a80b9fdb31f5","event_types":["advisory"],"published_at":"2026-10-24T21:28:47.295947+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-27T22:30:14.286+00:00","detail_url":"/advisories/advisory%3A04c8dfd0-9db7-40cb-8ffd-a80b9fdb31f5","group":{"id":"advisory:04c8dfd0-9db7-40cb-8ffd-a80b9fdb31f5","revision":1,"primary_event_id":3045,"change":"published","superseded_by":[],"changed":{"id":3045,"cve_ids":["CVE-2026-100884"],"payload":{"kind":"advisory","title":"Krayin laravel-crm attachment-download Endpoint acl.php resource injection","summary":"A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/Config/acl.php of the component attachment-download Endpoint. The manipulation of the argument ID leads to improper control of resource identifiers. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.2.6 is sufficient to resolve this issue. The identifier of the patch is 13d6988cda8d69ece45ee1890effc90a7f21cdc1. It is suggested to upgrade the affected component.","evidence":"cve:CVE-2026-100884","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100884","aliases":["CVE-2026-100884"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":4.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":4.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":4,"vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:OF/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:krayin:laravel-crm:*:*:*:*:*:*:*:*"],"vendor":"Krayin","modules":["attachment-download Endpoint"],"product":"laravel-crm","versions":[{"status":"affected","version":"2.2.0"},{"status":"affected","version":"2.2.1"},{"status":"affected","version":"2.2.2"},{"status":"affected","version":"2.2.3"},{"status":"affected","version":"2.2.4"},{"status":"affected","version":"2.2.5"},{"status":"unaffected","version":"2.2.6"}]}],"modified":"2026-09-28T12:54:26.833Z","provider":"cve","references":["https://vuldb.com/vuln/410814","https://vuldb.com/vuln/410814/cti","https://vuldb.com/cve/CVE-2026-100884","https://vuldb.com/submit/916218","https://github.com/krayin/laravel-crm/issues/2624","https://github.com/krayin/laravel-crm/pull/2627","https://github.com/carlosalbertotuma/advisory/blob/main/advisory-06-IDOR-Email-Attachment%20Download.md","https://github.com/krayin/laravel-crm/commit/13d6988cda8d69ece45ee1890effc90a7f21cdc1","https://github.com/krayin/laravel-crm/releases/tag/v2.2.6","https://github.com/krayin/laravel-crm/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100884","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T12:54:15.392910Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T12:54:26.833Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-27T22:30:14.286Z"}}},"related_cves":[{"value":"CVE-2026-100884","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:04c8dfd0-9db7-40cb-8ffd-a80b9fdb31f5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100884","advisory_id":"04c8dfd0-9db7-40cb-8ffd-a80b9fdb31f5","event_types":["advisory"],"published_at":"2026-10-24T21:28:47.295947+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-27T22:30:14.286+00:00","detail_url":"/events/3045"},"members":[{"id":3045,"cve_ids":["CVE-2026-100884"],"payload":{"kind":"advisory","title":"Krayin laravel-crm attachment-download Endpoint acl.php resource injection","summary":"A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/Config/acl.php of the component attachment-download Endpoint. The manipulation of the argument ID leads to improper control of resource identifiers. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.2.6 is sufficient to resolve this issue. The identifier of the patch is 13d6988cda8d69ece45ee1890effc90a7f21cdc1. It is suggested to upgrade the affected component.","evidence":"cve:CVE-2026-100884","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100884","aliases":["CVE-2026-100884"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":4.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":4.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":4,"vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:OF/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:krayin:laravel-crm:*:*:*:*:*:*:*:*"],"vendor":"Krayin","modules":["attachment-download Endpoint"],"product":"laravel-crm","versions":[{"status":"affected","version":"2.2.0"},{"status":"affected","version":"2.2.1"},{"status":"affected","version":"2.2.2"},{"status":"affected","version":"2.2.3"},{"status":"affected","version":"2.2.4"},{"status":"affected","version":"2.2.5"},{"status":"unaffected","version":"2.2.6"}]}],"modified":"2026-09-28T12:54:26.833Z","provider":"cve","references":["https://vuldb.com/vuln/410814","https://vuldb.com/vuln/410814/cti","https://vuldb.com/cve/CVE-2026-100884","https://vuldb.com/submit/916218","https://github.com/krayin/laravel-crm/issues/2624","https://github.com/krayin/laravel-crm/pull/2627","https://github.com/carlosalbertotuma/advisory/blob/main/advisory-06-IDOR-Email-Attachment%20Download.md","https://github.com/krayin/laravel-crm/commit/13d6988cda8d69ece45ee1890effc90a7f21cdc1","https://github.com/krayin/laravel-crm/releases/tag/v2.2.6","https://github.com/krayin/laravel-crm/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100884","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T12:54:15.392910Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T12:54:26.833Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-27T22:30:14.286Z"}}},"related_cves":[{"value":"CVE-2026-100884","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:04c8dfd0-9db7-40cb-8ffd-a80b9fdb31f5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100884","advisory_id":"04c8dfd0-9db7-40cb-8ffd-a80b9fdb31f5","event_types":["advisory"],"published_at":"2026-10-24T21:28:47.295947+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-27T22:30:14.286+00:00","detail_url":"/events/3045"}]}},{"id":2246,"cve_ids":["CVE-2026-97895"],"payload":{"kind":"advisory","title":"krayin laravel-crm User Management UserController.php privileges management","summary":"A vulnerability was determined in krayin laravel-crm up to 2.2.5. This affects an unknown part of the file packages/Webkul/Admin/src/Http/Controllers/Settings/UserController.php of the component User Management. Executing a manipulation of the argument role_id can lead to improper privilege management. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.2.6 is able to mitigate this issue. This patch is called 5469d70336fbb25e8e513683e82b32982ce8aa82. Upgrading the affected component is advised.","evidence":"cve:CVE-2026-97895","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-97895","aliases":["CVE-2026-97895"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:krayin:laravel-crm:*:*:*:*:*:*:*:*"],"vendor":"krayin","modules":["User Management"],"product":"laravel-crm","versions":[{"status":"affected","version":"2.2.0"},{"status":"affected","version":"2.2.1"},{"status":"affected","version":"2.2.2"},{"status":"affected","version":"2.2.3"},{"status":"affected","version":"2.2.4"},{"status":"affected","version":"2.2.5"},{"status":"unaffected","version":"2.2.6"}]}],"modified":"2026-09-25T18:40:39.301Z","provider":"cve","references":["https://vuldb.com/vuln/409907","https://vuldb.com/vuln/409907/cti","https://vuldb.com/cve/CVE-2026-97895","https://vuldb.com/submit/915369","https://github.com/krayin/laravel-crm/issues/2616","https://github.com/krayin/laravel-crm/pull/2621","https://github.com/carlosalbertotuma/advisory/blob/main/advisory-01-privesc.md","https://github.com/krayin/laravel-crm/commit/5469d70336fbb25e8e513683e82b32982ce8aa82","https://github.com/krayin/laravel-crm/releases/tag/v2.2.6","https://github.com/krayin/laravel-crm/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-97895","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-25T18:40:31.758418Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-25T18:40:39.301Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-25T18:15:17.276Z"}}},"related_cves":[{"value":"CVE-2026-97895","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:d7728c4e-c6d5-47d7-8c14-84bd31c47dd9","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97895","advisory_id":"d7728c4e-c6d5-47d7-8c14-84bd31c47dd9","event_types":["advisory"],"published_at":"2026-10-24T21:15:36.944798+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-25T18:15:17.276+00:00","detail_url":"/advisories/advisory%3Ad7728c4e-c6d5-47d7-8c14-84bd31c47dd9","group":{"id":"advisory:d7728c4e-c6d5-47d7-8c14-84bd31c47dd9","revision":1,"primary_event_id":2243,"change":"published","superseded_by":[],"changed":{"id":2243,"cve_ids":["CVE-2026-97895"],"payload":{"kind":"advisory","title":"krayin laravel-crm User Management UserController.php privileges management","summary":"A vulnerability was determined in krayin laravel-crm up to 2.2.5. This affects an unknown part of the file packages/Webkul/Admin/src/Http/Controllers/Settings/UserController.php of the component User Management. Executing a manipulation of the argument role_id can lead to improper privilege management. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.2.6 is able to mitigate this issue. This patch is called 5469d70336fbb25e8e513683e82b32982ce8aa82. Upgrading the affected component is advised.","evidence":"cve:CVE-2026-97895","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-97895","aliases":["CVE-2026-97895"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:krayin:laravel-crm:*:*:*:*:*:*:*:*"],"vendor":"krayin","modules":["User Management"],"product":"laravel-crm","versions":[{"status":"affected","version":"2.2.0"},{"status":"affected","version":"2.2.1"},{"status":"affected","version":"2.2.2"},{"status":"affected","version":"2.2.3"},{"status":"affected","version":"2.2.4"},{"status":"affected","version":"2.2.5"},{"status":"unaffected","version":"2.2.6"}]}],"modified":"2026-09-25T18:40:39.301Z","provider":"cve","references":["https://vuldb.com/vuln/409907","https://vuldb.com/vuln/409907/cti","https://vuldb.com/cve/CVE-2026-97895","https://vuldb.com/submit/915369","https://github.com/krayin/laravel-crm/issues/2616","https://github.com/krayin/laravel-crm/pull/2621","https://github.com/carlosalbertotuma/advisory/blob/main/advisory-01-privesc.md","https://github.com/krayin/laravel-crm/commit/5469d70336fbb25e8e513683e82b32982ce8aa82","https://github.com/krayin/laravel-crm/releases/tag/v2.2.6","https://github.com/krayin/laravel-crm/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-97895","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-25T18:40:31.758418Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-25T18:40:39.301Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-25T18:15:17.276Z"}}},"related_cves":[{"value":"CVE-2026-97895","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:d7728c4e-c6d5-47d7-8c14-84bd31c47dd9","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97895","advisory_id":"d7728c4e-c6d5-47d7-8c14-84bd31c47dd9","event_types":["advisory"],"published_at":"2026-10-24T21:15:36.944798+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-25T18:15:17.276+00:00","detail_url":"/events/2243"},"members":[{"id":2243,"cve_ids":["CVE-2026-97895"],"payload":{"kind":"advisory","title":"krayin laravel-crm User Management UserController.php privileges management","summary":"A vulnerability was determined in krayin laravel-crm up to 2.2.5. This affects an unknown part of the file packages/Webkul/Admin/src/Http/Controllers/Settings/UserController.php of the component User Management. Executing a manipulation of the argument role_id can lead to improper privilege management. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.2.6 is able to mitigate this issue. This patch is called 5469d70336fbb25e8e513683e82b32982ce8aa82. Upgrading the affected component is advised.","evidence":"cve:CVE-2026-97895","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-97895","aliases":["CVE-2026-97895"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:krayin:laravel-crm:*:*:*:*:*:*:*:*"],"vendor":"krayin","modules":["User Management"],"product":"laravel-crm","versions":[{"status":"affected","version":"2.2.0"},{"status":"affected","version":"2.2.1"},{"status":"affected","version":"2.2.2"},{"status":"affected","version":"2.2.3"},{"status":"affected","version":"2.2.4"},{"status":"affected","version":"2.2.5"},{"status":"unaffected","version":"2.2.6"}]}],"modified":"2026-09-25T18:40:39.301Z","provider":"cve","references":["https://vuldb.com/vuln/409907","https://vuldb.com/vuln/409907/cti","https://vuldb.com/cve/CVE-2026-97895","https://vuldb.com/submit/915369","https://github.com/krayin/laravel-crm/issues/2616","https://github.com/krayin/laravel-crm/pull/2621","https://github.com/carlosalbertotuma/advisory/blob/main/advisory-01-privesc.md","https://github.com/krayin/laravel-crm/commit/5469d70336fbb25e8e513683e82b32982ce8aa82","https://github.com/krayin/laravel-crm/releases/tag/v2.2.6","https://github.com/krayin/laravel-crm/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-97895","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-25T18:40:31.758418Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-25T18:40:39.301Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-25T18:15:17.276Z"}}},"related_cves":[{"value":"CVE-2026-97895","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:d7728c4e-c6d5-47d7-8c14-84bd31c47dd9","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97895","advisory_id":"d7728c4e-c6d5-47d7-8c14-84bd31c47dd9","event_types":["advisory"],"published_at":"2026-10-24T21:15:36.944798+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-25T18:15:17.276+00:00","detail_url":"/events/2243"}]}},{"id":2199,"cve_ids":["CVE-2026-48543"],"payload":{"kind":"advisory","title":"Krayin CRM 2.2.6 Stored Template Injection XSS via Web Form Description","summary":"Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the web form description field. Attackers can craft a web form description containing double-brace template syntax that reaches the Vue template compiler, enabling prototype chain traversal to retrieve the Function constructor and execute attacker-supplied JavaScript in the application origin for every user who views the affected web form.","evidence":"cve:CVE-2026-48543","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-48543","aliases":["CVE-2026-48543"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.1,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"LOW","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"2.2.6"}],"packageURL":"pkg:github/krayin/laravel-crm","defaultStatus":"unknown"}],"modified":"2026-09-25T17:15:19.694Z","provider":"cve","references":["https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-48541","https://www.vulncheck.com/advisories/krayin-crm-stored-template-injection-xss-via-web-form-description"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-48543","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-25T17:13:09.686517Z"}}}],"references":[{"url":"https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-48541","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-25T17:15:19.694Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-24T19:33:02.937Z"}}},"related_cves":[{"value":"CVE-2026-48543","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:9b55a036-65cc-4004-9db9-f4b098c4054d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-48543","advisory_id":"9b55a036-65cc-4004-9db9-f4b098c4054d","event_types":["advisory"],"published_at":"2026-10-24T21:13:58.31947+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T19:33:02.937+00:00","detail_url":"/advisories/advisory%3A9b55a036-65cc-4004-9db9-f4b098c4054d","group":{"id":"advisory:9b55a036-65cc-4004-9db9-f4b098c4054d","revision":1,"primary_event_id":2197,"change":"published","superseded_by":[],"changed":{"id":2197,"cve_ids":["CVE-2026-48543"],"payload":{"kind":"advisory","title":"Krayin CRM 2.2.6 Stored Template Injection XSS via Web Form Description","summary":"Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the web form description field. Attackers can craft a web form description containing double-brace template syntax that reaches the Vue template compiler, enabling prototype chain traversal to retrieve the Function constructor and execute attacker-supplied JavaScript in the application origin for every user who views the affected web form.","evidence":"cve:CVE-2026-48543","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-48543","aliases":["CVE-2026-48543"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.1,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"LOW","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"2.2.6"}],"packageURL":"pkg:github/krayin/laravel-crm","defaultStatus":"unknown"}],"modified":"2026-09-25T17:15:19.694Z","provider":"cve","references":["https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-48541","https://www.vulncheck.com/advisories/krayin-crm-stored-template-injection-xss-via-web-form-description"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-48543","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-25T17:13:09.686517Z"}}}],"references":[{"url":"https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-48541","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-25T17:15:19.694Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-24T19:33:02.937Z"}}},"related_cves":[{"value":"CVE-2026-48543","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:9b55a036-65cc-4004-9db9-f4b098c4054d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-48543","advisory_id":"9b55a036-65cc-4004-9db9-f4b098c4054d","event_types":["advisory"],"published_at":"2026-10-24T21:13:58.31947+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T19:33:02.937+00:00","detail_url":"/events/2197"},"members":[{"id":2197,"cve_ids":["CVE-2026-48543"],"payload":{"kind":"advisory","title":"Krayin CRM 2.2.6 Stored Template Injection XSS via Web Form Description","summary":"Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the web form description field. Attackers can craft a web form description containing double-brace template syntax that reaches the Vue template compiler, enabling prototype chain traversal to retrieve the Function constructor and execute attacker-supplied JavaScript in the application origin for every user who views the affected web form.","evidence":"cve:CVE-2026-48543","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-48543","aliases":["CVE-2026-48543"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.1,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"LOW","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"2.2.6"}],"packageURL":"pkg:github/krayin/laravel-crm","defaultStatus":"unknown"}],"modified":"2026-09-25T17:15:19.694Z","provider":"cve","references":["https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-48541","https://www.vulncheck.com/advisories/krayin-crm-stored-template-injection-xss-via-web-form-description"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-48543","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-25T17:13:09.686517Z"}}}],"references":[{"url":"https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-48541","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-25T17:15:19.694Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-24T19:33:02.937Z"}}},"related_cves":[{"value":"CVE-2026-48543","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:9b55a036-65cc-4004-9db9-f4b098c4054d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-48543","advisory_id":"9b55a036-65cc-4004-9db9-f4b098c4054d","event_types":["advisory"],"published_at":"2026-10-24T21:13:58.31947+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T19:33:02.937+00:00","detail_url":"/events/2197"}]}},{"id":1878,"cve_ids":["CVE-2026-48540"],"payload":{"kind":"advisory","title":"Krayin CRM 2.2.6 Stored Template Injection XSS via Lead Title","summary":"Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the lead title field. Attackers can craft a lead title containing double-brace template syntax that reaches the Vue template compiler, enabling prototype chain traversal to retrieve the Function constructor and execute attacker-supplied JavaScript in the application origin for every user who views the affected lead record.","evidence":"cve:CVE-2026-48540","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-48540","aliases":["CVE-2026-48540"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.1,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"LOW","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"2.2.6"}],"packageURL":"pkg:github/krayin/laravel-crm","defaultStatus":"unknown"}],"modified":"2026-09-24T19:35:25.530Z","provider":"cve","references":["https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-48540","https://www.vulncheck.com/advisories/krayin-crm-stored-template-injection-xss-via-lead-title"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-48540","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T19:35:00.774527Z"}}}],"references":[{"url":"https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-48540","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T19:35:25.530Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-24T19:28:00.370Z"}}},"related_cves":[{"value":"CVE-2026-48540","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:e43205c4-950b-4369-bb9e-33051fc1f386","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-48540","advisory_id":"e43205c4-950b-4369-bb9e-33051fc1f386","event_types":["advisory"],"published_at":"2026-10-24T21:08:45.879384+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T19:28:00.37+00:00","detail_url":"/advisories/advisory%3Ae43205c4-950b-4369-bb9e-33051fc1f386","group":{"id":"advisory:e43205c4-950b-4369-bb9e-33051fc1f386","revision":1,"primary_event_id":1875,"change":"published","superseded_by":[],"changed":{"id":1875,"cve_ids":["CVE-2026-48540"],"payload":{"kind":"advisory","title":"Krayin CRM 2.2.6 Stored Template Injection XSS via Lead Title","summary":"Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the lead title field. Attackers can craft a lead title containing double-brace template syntax that reaches the Vue template compiler, enabling prototype chain traversal to retrieve the Function constructor and execute attacker-supplied JavaScript in the application origin for every user who views the affected lead record.","evidence":"cve:CVE-2026-48540","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-48540","aliases":["CVE-2026-48540"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.1,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"LOW","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"2.2.6"}],"packageURL":"pkg:github/krayin/laravel-crm","defaultStatus":"unknown"}],"modified":"2026-09-24T19:35:25.530Z","provider":"cve","references":["https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-48540","https://www.vulncheck.com/advisories/krayin-crm-stored-template-injection-xss-via-lead-title"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-48540","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T19:35:00.774527Z"}}}],"references":[{"url":"https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-48540","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T19:35:25.530Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-24T19:28:00.370Z"}}},"related_cves":[{"value":"CVE-2026-48540","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:e43205c4-950b-4369-bb9e-33051fc1f386","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-48540","advisory_id":"e43205c4-950b-4369-bb9e-33051fc1f386","event_types":["advisory"],"published_at":"2026-10-24T21:08:45.879384+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T19:28:00.37+00:00","detail_url":"/events/1875"},"members":[{"id":1875,"cve_ids":["CVE-2026-48540"],"payload":{"kind":"advisory","title":"Krayin CRM 2.2.6 Stored Template Injection XSS via Lead Title","summary":"Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the lead title field. Attackers can craft a lead title containing double-brace template syntax that reaches the Vue template compiler, enabling prototype chain traversal to retrieve the Function constructor and execute attacker-supplied JavaScript in the application origin for every user who views the affected lead record.","evidence":"cve:CVE-2026-48540","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-48540","aliases":["CVE-2026-48540"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.1,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"LOW","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"2.2.6"}],"packageURL":"pkg:github/krayin/laravel-crm","defaultStatus":"unknown"}],"modified":"2026-09-24T19:35:25.530Z","provider":"cve","references":["https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-48540","https://www.vulncheck.com/advisories/krayin-crm-stored-template-injection-xss-via-lead-title"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-48540","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T19:35:00.774527Z"}}}],"references":[{"url":"https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-48540","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T19:35:25.530Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-24T19:28:00.370Z"}}},"related_cves":[{"value":"CVE-2026-48540","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:e43205c4-950b-4369-bb9e-33051fc1f386","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-48540","advisory_id":"e43205c4-950b-4369-bb9e-33051fc1f386","event_types":["advisory"],"published_at":"2026-10-24T21:08:45.879384+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T19:28:00.37+00:00","detail_url":"/events/1875"}]}},{"id":1660,"cve_ids":["CVE-2026-90944"],"payload":{"kind":"advisory","title":"Krayin CRM through 2.2.6 Unauthenticated Email Injection via inbound-parse","summary":"Krayin CRM through 2.2.6 exposes the POST /admin/mail/inbound-parse endpoint without authentication, allowing unauthenticated attackers to inject arbitrary emails into the CRM inbox. Attackers can supply crafted RFC 2822 messages with forged sender information and headers to insert emails with any subject and body, including replies to existing conversation threads.","evidence":"cve:CVE-2026-90944","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-90944","aliases":["CVE-2026-90944"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"2.2.6"}],"packageURL":"pkg:composer/krayin/laravel-crm","defaultStatus":"unaffected"}],"modified":"2026-09-24T14:22:04.713Z","provider":"cve","references":["https://github.com/krayin/laravel-crm/issues/2560","https://github.com/krayin/laravel-crm","https://github.com/krayin/laravel-crm/blob/v2.2.6/packages/Webkul/Admin/src/Routes/Admin/mail-routes.php","https://github.com/krayin/laravel-crm/blob/v2.2.6/bootstrap/app.php","https://www.vulncheck.com/advisories/krayin-crm-through-2.2.6-unauthenticated-email-injection-via-inbound-parse"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-90944","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-14T20:22:34.525295Z"}}}],"references":[{"url":"https://github.com/krayin/laravel-crm/issues/2560","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-14T20:22:41.001Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-24T14:22:04.713Z"}}},"related_cves":[{"value":"CVE-2026-90944","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:2d744287-b0fb-41a4-8d44-c1f0621161bf","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-90944","advisory_id":"2d744287-b0fb-41a4-8d44-c1f0621161bf","event_types":["advisory"],"published_at":"2026-10-24T21:05:28.345787+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T17:52:05.5+00:00","detail_url":"/advisories/advisory%3A2d744287-b0fb-41a4-8d44-c1f0621161bf","group":{"id":"advisory:2d744287-b0fb-41a4-8d44-c1f0621161bf","revision":1,"primary_event_id":1644,"change":"published","superseded_by":[],"changed":{"id":1644,"cve_ids":["CVE-2026-90944"],"payload":{"kind":"advisory","title":"Krayin CRM through 2.2.6 Unauthenticated Email Injection via inbound-parse","summary":"Krayin CRM through 2.2.6 exposes the POST /admin/mail/inbound-parse endpoint without authentication, allowing unauthenticated attackers to inject arbitrary emails into the CRM inbox. Attackers can supply crafted RFC 2822 messages with forged sender information and headers to insert emails with any subject and body, including replies to existing conversation threads.","evidence":"cve:CVE-2026-90944","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-90944","aliases":["CVE-2026-90944"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"2.2.6"}],"packageURL":"pkg:composer/krayin/laravel-crm","defaultStatus":"unaffected"}],"modified":"2026-09-24T14:22:04.713Z","provider":"cve","references":["https://github.com/krayin/laravel-crm/issues/2560","https://github.com/krayin/laravel-crm","https://github.com/krayin/laravel-crm/blob/v2.2.6/packages/Webkul/Admin/src/Routes/Admin/mail-routes.php","https://github.com/krayin/laravel-crm/blob/v2.2.6/bootstrap/app.php","https://www.vulncheck.com/advisories/krayin-crm-through-2.2.6-unauthenticated-email-injection-via-inbound-parse"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-90944","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-14T20:22:34.525295Z"}}}],"references":[{"url":"https://github.com/krayin/laravel-crm/issues/2560","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-14T20:22:41.001Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-24T14:22:04.713Z"}}},"related_cves":[{"value":"CVE-2026-90944","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:2d744287-b0fb-41a4-8d44-c1f0621161bf","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-90944","advisory_id":"2d744287-b0fb-41a4-8d44-c1f0621161bf","event_types":["advisory"],"published_at":"2026-10-24T21:05:28.345787+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T17:52:05.5+00:00","detail_url":"/events/1644"},"members":[{"id":1644,"cve_ids":["CVE-2026-90944"],"payload":{"kind":"advisory","title":"Krayin CRM through 2.2.6 Unauthenticated Email Injection via inbound-parse","summary":"Krayin CRM through 2.2.6 exposes the POST /admin/mail/inbound-parse endpoint without authentication, allowing unauthenticated attackers to inject arbitrary emails into the CRM inbox. Attackers can supply crafted RFC 2822 messages with forged sender information and headers to insert emails with any subject and body, including replies to existing conversation threads.","evidence":"cve:CVE-2026-90944","products":[{"name":{"value":"laravel-crm","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-90944","aliases":["CVE-2026-90944"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"repo":"https://github.com/krayin/laravel-crm","vendor":"krayin","product":"laravel-crm","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"2.2.6"}],"packageURL":"pkg:composer/krayin/laravel-crm","defaultStatus":"unaffected"}],"modified":"2026-09-24T14:22:04.713Z","provider":"cve","references":["https://github.com/krayin/laravel-crm/issues/2560","https://github.com/krayin/laravel-crm","https://github.com/krayin/laravel-crm/blob/v2.2.6/packages/Webkul/Admin/src/Routes/Admin/mail-routes.php","https://github.com/krayin/laravel-crm/blob/v2.2.6/bootstrap/app.php","https://www.vulncheck.com/advisories/krayin-crm-through-2.2.6-unauthenticated-email-injection-via-inbound-parse"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-90944","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-14T20:22:34.525295Z"}}}],"references":[{"url":"https://github.com/krayin/laravel-crm/issues/2560","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-14T20:22:41.001Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-24T14:22:04.713Z"}}},"related_cves":[{"value":"CVE-2026-90944","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:2d744287-b0fb-41a4-8d44-c1f0621161bf","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-90944","advisory_id":"2d744287-b0fb-41a4-8d44-c1f0621161bf","event_types":["advisory"],"published_at":"2026-10-24T21:05:28.345787+00:00","technologies":["core-cve","laravel-crm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T17:52:05.5+00:00","detail_url":"/events/1644"}]}}],"next_after":50591,"next_before":1660}