CVE-2026-59994 | EspoCRM up to 9.3.8 Email Received Stream Notification cross site scripting

A vulnerability was found in EspoCRM up to 9.3.8. It has been classified as problematic. Affected by this issue is some unknown functionality of the component Email Received Stream Notification. Performing a manipulation results in basic cross site scripting.

This vulnerability was named CVE-2026-59994. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More