CVE ID :CVE-2026-61460 Published : July 10, 2026, 7:17 p.m. | 1 hour, 15 minutes ago Description :Krayin CRM through 2.2.3 contains an insecure direct object reference vulnerability in LeadController, PersonController, OrganizationController, QuoteController, and ActivityController that...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-61460 - Krayin CRM Insecure Direct Object Reference via Controllers

VERWANDTEARTIKEL

CVE-2026-55882 - Tilt: Unauthenticated pprof debug endpoints on the Tilt HUD server

CVE-2026-55883 - Tilt: Cross-site WebSocket hijacking of the Tilt HUD stream

CVE-2026-55884 - Tilt: Missing authentication on the network-exposed Tilt HUD server

CVE-2026-57584 - Phalcon: Catastrophic backtracking (ReDoS) in the default Phalcon Router route lead to remote unauthenticated DoS

CVE-2026-55852 - Frappe: TarSlip RCE in Package Import

CVE-2026-49213 - TypeBot: SSRF protection bypass via IPv6 unspecified address in Typebot HTTP request execution