CVE-2026-69137 | SuiteCRM up to 7.15.1/8.10.1 Calendar action_testConnection server_url server-side request forgery

SecurityVulns
Yanac

A vulnerability marked as problematic has been reported in SuiteCRM up to 7.15.1/8.10.1. The impacted element is the function CalendarAccount::action_testConnection of the component Calendar. The manipulation of the argument server_url leads to server-side request forgery.

This vulnerability is listed as CVE-2026-69137. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More