CVE-2026-69134 | SuiteCRM up to 7.15.1/8.10.1 REST v4 JSON updateRow RAW_REQUEST sql injection

SecurityVulns
Yanac

A vulnerability was found in SuiteCRM up to 7.15.1/8.10.1. It has been rated as critical. The affected element is the function SugarRelationship::addRow/SugarRelationship::updateRow of the component REST v4 JSON Handler. Performing a manipulation of the argument RAW_REQUEST results in sql injection.

This vulnerability was named CVE-2026-69134. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More