CVE-2026-110593 | MicroPyramid BottleCRM up to 1.14.5 Email Sending Task create_mail send_email message_body special elements in template engine

October 14, 2026 Yanac

A vulnerability was found in MicroPyramid BottleCRM up to 1.14.5. It has been rated as critical. This vulnerability affects the function send_email of the file /api/accounts/create_mail/ of the component Email Sending Task. Performing a manipulation of the argument message_body results in improper neutralization of special elements used in a template engine.

This vulnerability is known as CVE-2026-110593. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More