CVE-2026-126496 | 1Panel-dev CordysCRM up to 1.9.5 CustomerContactController CustomerContactController.get id authorization

A vulnerability was found in 1Panel-dev CordysCRM up to 1.9.5. It has been classified as problematic. This vulnerability affects the function CustomerContactController.get of the component CustomerContactController. This manipulation of the argument ID causes authorization bypass.

The identification of this vulnerability is CVE-2026-126496. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More