CVE-2026-112287 | Krayin laravel-crm up to 2.2.6 EmailController authorization

October 19, 2026 Yanac

A vulnerability has been found in Krayin laravel-crm up to 2.2.6 and classified as critical. Affected is the function EmailController. Performing a manipulation results in authorization bypass.

This vulnerability is known as CVE-2026-112287. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More

CVE-2026-112279 | rdesktop up to 1.9.0 Bitmap Cache orders.c process_bmpcache2 out-of-bounds
CVE-2026-112278 | rdesktop up to 1.9.0 Bitmap Cache orders.c process_raw_bmpcache bpp out-of-bounds