CVE-2026-71548 - SuiteCRM: Authenticated SQL Injection in AOR_Reports `parameter_value` (value_type=Field) allows any low-privileged user to read the full database
CVE ID :CVE-2026-71548 Published : Nov. 5, 2026, 7:17 p.m. | 1 hour, 52 minutes ago Description :SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.2 and 8.10.2, AOR_Report::build_report_query_where incorporates a report...