CVE-2026-29100Disclosure(suitecrm / suitecrm)

LOWCVSS 6.1 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. SuiteCRM 7.15.0 contains a reflected HTML injection vulnerability in the login page that allows attackers to inject arbitrary HTML content, enabling phishing attacks and page defacement. Version 7.15.1 patches the issue.

suitecrm CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-g7hf-3j93-rwm5

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

suitecrm

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Affected systems

Vendors

suitecrm

Products

suitecrm

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud202d
Disclosure
🚨*CVE* CVE-2026-29100 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. SuiteCRM 7.15.0 contains a reflected HTML injection vulnerab… https://www.cve.org/CVERecord?id=CVE-2026-29100 ----- Traducción: CVE-2026-29100 Sui… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑29100, noting a reflected HTML injection issue in SuiteCRM 7.15.0, but offers no evidence of exploitation, fixes, or proof‑of‑concepts.
0000030
61 followersView on X
CVE@CVEnew202d
Disclosure
CVE-2026-29100 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. SuiteCRM 7.15.0 contains a reflected HTML injection vulnerab… https://www.cve.org/CVERecord?id=CVE-2026-29100
Post summary
The snippet announces CVE-2026-29100, a reflected HTML injection flaw in SuiteCRM 7.15.0, without detailing PoC, exploit code, active attacks, or patches.
00000145
56.8K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	suitecrm	suitecrm	-	-	-

Explore more

Back to dashboard suitecrm CVEs suitecrm vulnerabilities