| CVE-2026-126496 |
1Panel-dev CordysCRM before 1.9.6 Authorization Bypass via /account/contact/get/{id}
|
5.3
Moyenne
|
11 nov. 2026 |
| CVE-2026-108705 |
CordysCRM through 1.9.3 contains a missing authorization vulnerability in the POST /custom-form/data/import endpoint…
|
5.3
Moyenne
|
11 oct. 2026 |
| CVE-2026-108703 |
CordysCRM through 1.9.3 contains a missing authorization vulnerability in POST /approval-resource/push that allows…
|
5.3
Moyenne
|
11 oct. 2026 |
| CVE-2026-108704 |
CordysCRM through 1.9.3 contains an authorization bypass vulnerability that allows low-privileged authenticated users to…
|
5.3
Moyenne
|
11 oct. 2026 |
| CVE-2026-108702 |
1Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING permission check on POST /approval-flow/webhook/test,…
|
5.3
Moyenne
|
11 oct. 2026 |
| CVE-2026-108700 |
1Panel-dev CordysCRM before 1.9.2 contains a missing authorization vulnerability that allows authenticated users to list…
|
7.1
Élevée
|
11 oct. 2026 |
| CVE-2026-108701 |
1Panel-dev CordysCRM before 1.9.2 contains a missing authorization vulnerability in the ContractController sortModule…
|
5.3
Moyenne
|
11 oct. 2026 |
| CVE-2026-108692 |
1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vulnerability in eight…
|
7.1
Élevée
|
11 oct. 2026 |
| CVE-2026-76899 |
CordysCRM is an open source AI-powered customer relationship management system that supports private deployment
|
5.7
Moyenne
|
18 sept. 2026 |
| CVE-2026-76902 |
CordysCRM is an open source AI-powered customer relationship management system that supports private deployment
|
5.0
Moyenne
|
18 sept. 2026 |
| CVE-2026-76900 |
CordysCRM is an open source AI-powered customer relationship management system that supports private deployment
|
6.8
Moyenne
|
18 sept. 2026 |
| CVE-2026-76901 |
CordysCRM is an open source AI-powered customer relationship management system that supports private deployment
|
5.8
Moyenne
|
18 sept. 2026 |
| CVE-2026-63647 |
CordysCRM is an open source AI-powered customer relationship management system that supports private deployment
|
9.3
Critique
|
18 sept. 2026 |
| CVE-2026-63646 |
CordysCRM is an open source AI-powered customer relationship management system that supports private deployment
|
6.9
Moyenne
|
18 sept. 2026 |
| CVE-2026-52745 |
CordysCRM is an open source AI-powered customer relationship management system that supports private deployment
|
5.3
Moyenne
|
18 sept. 2026 |
| CVE-2026-16223 |
A vulnerability was determined in 1Panel-dev CordysCRM up to 1.4.1
|
5.3
Moyenne
|
19 juil. 2026 |
| CVE-2026-16222 |
A vulnerability was found in 1Panel-dev CordysCRM up to 1.4.1
|
5.3
Moyenne
|
19 juil. 2026 |
| CVE-2026-10567 |
A security vulnerability has been detected in 1Panel-dev CordysCRM up to 1.4.1
|
5.1
Moyenne
|
2 juin 2026 |
| CVE-2026-10514 |
A vulnerability has been found in 1Panel-dev CordysCRM up to 1.6.2
|
4.8
Moyenne
|
1 juin 2026 |