CVE-2026-46708 | EspoCRM up to 9.3.6 improper authorization

October 15, 2026 Yanac

A vulnerability marked as problematic has been reported in EspoCRM up to 9.3.6. The impacted element is an unknown function. Performing a manipulation results in improper authorization.

This vulnerability is cataloged as CVE-2026-46708. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More