Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Krayin CRM v2.2.x was discovered to contain a SQL injection vulnerability via the rotten_lead parameter at /Lead/LeadDataGrid.php.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-14 | 1 | Disclosure1 |
| 2026-04-19 | 1 | Disclosure1 |
| 2026-06-28 | 1 | General1 |
It is possible to see elevated activities targeting Krayin CRM (CVE-2026-38528) https://vuldb.com/vuln/357342/cti
Post summary
The post references potential heightened activity toward Krayin CRM for CVE‑2026‑38528 but does not provide PoC code, exploit details, evidence of active exploitation, or patches.
CVE-2026-38528 Krayin CRM v2.2.x was discovered to contain a SQL injection vulnerability via the rotten_lead parameter at /Lead/LeadDataGrid.php. https://www.cve.org/CVERecord?id=CVE-2026-38528
Post summary
The post announces a new SQL injection flaw in Krayin CRM v2.2.x, detailing the vulnerable parameter and file path.
⚠️ HIGH — CVE-2026-38528 Krayin CRM v2.2.x was discovered to contain a SQL injection vulnerability via the rotten_lead parameter at /Lead/LeadDa… CVSS 7.1 Full analysis → https://sec.kaitan.id/cves/CVE-2026-38528 #HP #CyberSecurity #InfoSec
Post summary
CVE-2026-38528 is a high‑severity SQL injection vulnerability in Krayin CRM v2.2.x, affecting the rotten_lead parameter (CVSS 7.1), with no exploit code, patch, or indications of active exploitation reported.