CVE-2026-69136 | SuiteCRM up to 7.15.1/8.10.1 Email Template Attachment securexss remove_attachment sql injection

November 5, 2026 Yanac

A vulnerability classified as critical has been found in SuiteCRM up to 7.15.1/8.10.1. This impacts the function securexss of the component Email Template Attachment Handler. This manipulation of the argument remove_attachment causes sql injection.

This vulnerability is registered as CVE-2026-69136. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More