CVE-2026-46694 | EspoCRM up to 9.3.6 Portal Note API information disclosure

October 15, 2026 Yanac

A vulnerability identified as problematic has been detected in EspoCRM up to 9.3.6. Impacted is an unknown function of the component Portal Note API. This manipulation causes information disclosure.

This vulnerability is tracked as CVE-2026-46694. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More