CVE-2026-97377 | SuiteCRM up to 7.15.1/8.10.1 SOAP Portal portal_get_entry_list where/order_by sql injection

November 5, 2026 Yanac

A vulnerability described as critical has been identified in SuiteCRM up to 7.15.1/8.10.1. Affected by this vulnerability is the function portal_get_entry_list of the component SOAP Portal. Such manipulation of the argument where/order_by leads to sql injection.

This vulnerability is listed as CVE-2026-97377. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More