CVE-2026-47168 - EspoCRM: Authenticated RCE via Unsafe PHP Object Deserialization in MassAction/Export params
CVE ID :CVE-2026-47168 Published : Oct. 15, 2026, 3:17 p.m. | 16 minutes ago Description :EspoCRM is an open source customer relationship management application. Prior to 9.3.7, an authenticated administrator can supply crafted serialized PHP object data that is stored in background...