CVE-2026-112286 | Krayin laravel-crm up to 2.2.6 Quotes QuoteController resource injection

October 19, 2026 Yanac

A vulnerability was found in Krayin laravel-crm up to 2.2.6. It has been classified as problematic. Affected by this issue is the function QuoteController of the component Quotes. The manipulation leads to improper control of resource identifiers.

This vulnerability is uniquely identified as CVE-2026-112286. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More