Skip to content
OpenAdvisories
High · 7.2 CVE-2026-29102 EUVD-2026-13362

SuiteCRM has Authenticated RCE in Modules

Published Mar 19, 2026 · Updated Mar 20, 2026 · Assigned by GitHub_M

Description

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, an Authenticated Remote Code Execution (RCE) vulnerability exists in SuiteCRM modules. Versions 7.15.1 and 8.9.3 patch the issue.

Affected products

VendorProductAffectedFixed
SuiteCRM SuiteCRM < 7.15.1, >= 8.0.0, < 8.9.3 —

Advisories 1

References