CVE-2026-100364 | SuiteCRM up to 7.15.1/8.10.1 V8 JSON:API update path updateRecord id improper authorization

November 5, 2026 Yanac

A vulnerability classified as critical was found in SuiteCRM up to 7.15.1/8.10.1. This affects the function updateRecord of the component V8 JSON:API update path. Executing a manipulation of the argument ID can lead to improper authorization.

This vulnerability is registered as CVE-2026-100364. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More