CVE-2026-90934 | EspoCRM up to 10.0.3 Attendees Endpoint privileges management

September 14, 2026 Yanac

A vulnerability was found in EspoCRM up to 10.0.3. It has been declared as problematic. The impacted element is an unknown function of the component Attendees Endpoint. The manipulation results in improper privilege management.

This vulnerability is reported as CVE-2026-90934. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More