CVE-2026-41452 | Krayin laravel-crm up to 2.2.2 Installer Middleware name/email/password missing authentication

August 3, 2026 Yanac

A vulnerability, which was classified as critical, was found in Krayin laravel-crm up to 2.2.2. This affects an unknown part of the component Installer Middleware. Executing a manipulation of the argument name/email/password can lead to missing authentication.

This vulnerability appears as CVE-2026-41452. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More