CVE-2026-29102

8.8 highEPSS 0.5%

High (8.8) in suitecrm suitecrm. EPSS 0.5% chance of exploitation in the next 30 days.

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, an Authenticated Remote Code Execution (RCE) vulnerability exists in SuiteCRM modules. Versions 7.15.1 and 8.9.3 patch the issue.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2026-03-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

suitecrm:suitecrm

References

https://docs.suitecrm.com/admin/releases/7.15.x
https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-mr5v-wcgr-98qr

Check your stack JSON