CVE-2026-116008 | Bottelet DaybydayCRM up to 2.2.1 Project Assignment /projects/updateassign updateAssign user_assigned_id improper authorization

October 24, 2026 Yanac

A vulnerability was found in Bottelet DaybydayCRM up to 2.2.1. It has been declared as problematic. This vulnerability affects the function ProjectsController::updateAssign of the file /projects/updateassign of the component Project Assignment. Such manipulation of the argument user_assigned_id leads to improper authorization.

This vulnerability is referenced as CVE-2026-116008. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More