CVE-2026-33289 - Vulnerability Analysis

Overview

SuiteCRM < 7.15.1 and < 8.9.3 contain an LDAP injection caused by improper sanitization of user input in the authentication flow, letting unauthenticated attackers bypass authentication or disclose information, exploit requires crafted input.

Severity & Score

Impact

Unauthenticated attackers can bypass authentication or disclose sensitive information, compromising system security.

Mitigation

Upgrade to versions 7.15.1 or 8.9.3 or later.

References

• https://docs.suitecrm.com/admin/releases/7.15.x
• https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-26vx-rj47-x599

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner