An issue in BusinessNext CRMnext v.10.8.3.0 allows a remote attacker to execute arbitrary code via the comments input parameter.

Published Oct 30, 2025 · Updated Oct 31, 2025 · Assigned by mitre