SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Mar 20, 2026 · NIST NVD

   Detected

   SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions up to and including 8.9.2 contain an unsafe deserialization vulnerability in the SavedSearch filter processing component that allows an authenticated administrator to execute arbitrary system commands on the server. calls on user-controlled data from the database column without restri

2. Jun 17, 2026 · NIST NVD

   Updated

   SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions up to and including 8.9.2 contain an unsafe deserialization vulnerability in the SavedSearch filter processing component that allows an authenticated administrator to execute arbitrary system commands on the server. calls on user-controlled data from the database column without restri

Affected

• cpe suitecrm/suitecrmversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-29109

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-29109

  SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions up to and including 8.9.2 contain an unsafe deserialization vulnerability in the SavedSearch filter processing component that allows an authenticated administrator t

  nvd.nist.gov

References

• Vendor Advisory · github.com