CVE-2026-90944 | Krayin laravel-crm up to 2.2.6 Inbound Parse inbound-parse injection

September 14, 2026 Yanac

A vulnerability, which was classified as critical, was found in Krayin laravel-crm up to 2.2.6. This affects an unknown function of the file /admin/mail/inbound-parse of the component Inbound Parse. Such manipulation leads to injection.

This vulnerability is traded as CVE-2026-90944. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More