CVE-2026-111349 | puemos Craftplan up to 0.7.5 CRM Customer Resource /api/json/customers improper authorization

October 15, 2026 Yanac

A vulnerability described as problematic has been identified in puemos Craftplan up to 0.7.5. This affects an unknown function of the file /api/json/customers of the component CRM Customer Resource. The manipulation results in improper authorization.

This vulnerability was named CVE-2026-111349. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More