Skip to content
OpenAdvisories
Medium · 4.9 CVE-2026-29101 EUVD-2026-13361

SuiteCRM Vulnerable to Directory Traversal to DoS in Modules

Published Mar 19, 2026 · Updated Mar 20, 2026 · Assigned by GitHub_M

Description

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, a Denial-of-Service (DoS) vulnerability exists in SuiteCRM modules. Versions 7.15.1 and 8.9.3 patch the issue.

Affected products

VendorProductAffectedFixed
SuiteCRM SuiteCRM < 7.15.1, >= 8.0.0, < 8.9.3 —

Advisories 1

References