CVE-2026-29189 - Vulnerability Analysis

Overview

SuiteCRM < 7.15.1 and < 8.9.3 contain a broken access control vulnerability caused by missing ACL checks in REST API V8 endpoints, letting authenticated users access and manipulate unauthorized data, exploit requires user authentication.

Severity & Score

Impact

Authenticated users can access and modify data without proper permissions, risking data integrity and confidentiality.

Mitigation

Upgrade to versions 7.15.1 and 8.9.3 or later.

References

• https://docs.suitecrm.com/admin/releases/7.15.x
• https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-m6x8-3hxp-qxwv

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner