CVE-2026-118686 | EspoCRM up to 9.3.10/10.0.7 Password Redaction resource consumption

October 28, 2026 Yanac

A vulnerability marked as problematic has been reported in EspoCRM up to 9.3.10/10.0.7. This impacts an unknown function of the component Password Redaction. This manipulation causes resource consumption.

This vulnerability appears as CVE-2026-118686. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More