CVE-2026-100361 | SuiteCRM up to 7.15.1/8.10.1 V8 Write Path /Api/V8/module access control

A vulnerability labeled as critical has been found in SuiteCRM up to 7.15.1/8.10.1. This impacts an unknown function of the file /Api/V8/module of the component V8 Write Path. The manipulation of the argument user_hash/external_auth_only/api-visible/sensitive results in improper access controls.

This vulnerability is identified as CVE-2026-100361. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More