CVE-2026-100359 | SuiteCRM up to 7.15.1/8.10.1 Project Template action_get_end_date task_id/lag sql injection

A vulnerability, which was classified as critical, has been found in SuiteCRM up to 7.15.1/8.10.1. This vulnerability affects the function action_get_end_date of the component Project Template. The manipulation of the argument task_id/lag leads to sql injection.

This vulnerability is documented as CVE-2026-100359. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More