CVE-2026-55550 | pdovhomilja NextCRM up to 0.12.2 MCP /api/mcp/mcp write access control

July 20, 2026 Yanac

A vulnerability has been found in pdovhomilja NextCRM up to 0.12.2 and classified as critical. Affected is the function write of the file /api/mcp/mcp of the component MCP. Performing a manipulation results in improper access controls.

This vulnerability is known as CVE-2026-55550. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More