Skip to content
OpenAdvisories

Vendor

Vtiger

4 known vulnerabilities.

Products

Vtiger CRM 3 CRM 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-23697 Public exploit

    Vtiger CRM < 8.4.0 Authenticated File Upload RCE via Documents Module

    Vtiger CRM before 8.4.0 contains an authenticated file upload vulnerability that allows low-privileged users to achieve remote code execution by uploading a .phar file containing arbitrary PHP code through the Documents module, bypassing the extension denylis…

    Vtiger Vtiger CRM
  • High 7.2
    CVE-2026-23698 Public exploit

    Vtiger CRM 8.4.0 Authenticated RCE via Module Import File Upload

    Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the admin module import feature that allows administrator-level attackers to upload arbitrary PHP files by submitting a crafted zip archive through the ModuleManager imp…

    Vtiger Vtiger CRM
  • Unscored —
    CVE-2015-6000 Public exploit EPSS 40%

    Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtige…

    Vtiger Vtiger CRM