| CVE-2026-126496 |
1Panel-dev CordysCRM before 1.9.6 Authorization Bypass via /account/contact/get/{id}
|
5.3
Medium
|
Nov 11, 2026 |
| CVE-2026-108705 |
CordysCRM through 1.9.3 contains a missing authorization vulnerability in the POST /custom-form/data/import endpoint…
|
5.3
Medium
|
Oct 11, 2026 |
| CVE-2026-108703 |
CordysCRM through 1.9.3 contains a missing authorization vulnerability in POST /approval-resource/push that allows…
|
5.3
Medium
|
Oct 11, 2026 |
| CVE-2026-108704 |
CordysCRM through 1.9.3 contains an authorization bypass vulnerability that allows low-privileged authenticated users to…
|
5.3
Medium
|
Oct 11, 2026 |
| CVE-2026-108702 |
1Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING permission check on POST /approval-flow/webhook/test,…
|
5.3
Medium
|
Oct 11, 2026 |
| CVE-2026-108700 |
1Panel-dev CordysCRM before 1.9.2 contains a missing authorization vulnerability that allows authenticated users to list…
|
7.1
High
|
Oct 11, 2026 |
| CVE-2026-108701 |
1Panel-dev CordysCRM before 1.9.2 contains a missing authorization vulnerability in the ContractController sortModule…
|
5.3
Medium
|
Oct 11, 2026 |
| CVE-2026-108692 |
1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vulnerability in eight…
|
7.1
High
|
Oct 11, 2026 |
| CVE-2026-76899 |
CordysCRM is an open source AI-powered customer relationship management system that supports private deployment
|
5.7
Medium
|
Sep 18, 2026 |
| CVE-2026-76902 |
CordysCRM is an open source AI-powered customer relationship management system that supports private deployment
|
5.0
Medium
|
Sep 18, 2026 |
| CVE-2026-76900 |
CordysCRM is an open source AI-powered customer relationship management system that supports private deployment
|
6.8
Medium
|
Sep 18, 2026 |
| CVE-2026-76901 |
CordysCRM is an open source AI-powered customer relationship management system that supports private deployment
|
5.8
Medium
|
Sep 18, 2026 |
| CVE-2026-63647 |
CordysCRM is an open source AI-powered customer relationship management system that supports private deployment
|
9.3
Critical
|
Sep 18, 2026 |
| CVE-2026-63646 |
CordysCRM is an open source AI-powered customer relationship management system that supports private deployment
|
6.9
Medium
|
Sep 18, 2026 |
| CVE-2026-52745 |
CordysCRM is an open source AI-powered customer relationship management system that supports private deployment
|
5.3
Medium
|
Sep 18, 2026 |
| CVE-2026-16223 |
A vulnerability was determined in 1Panel-dev CordysCRM up to 1.4.1
|
5.3
Medium
|
Jul 19, 2026 |
| CVE-2026-16222 |
A vulnerability was found in 1Panel-dev CordysCRM up to 1.4.1
|
5.3
Medium
|
Jul 19, 2026 |
| CVE-2026-10567 |
A security vulnerability has been detected in 1Panel-dev CordysCRM up to 1.4.1
|
5.1
Medium
|
Jun 2, 2026 |
| CVE-2026-10514 |
A vulnerability has been found in 1Panel-dev CordysCRM up to 1.6.2
|
4.8
Medium
|
Jun 1, 2026 |