ZeroDay Findings
Sign inSign up

Findings

CVE-2026-32697

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.

Published Mar 20, 2026 · updated Jun 17, 2026 · suitecrm suitecrm

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 8.9.3, the method retrieves any record by module and ID without checking the current user's ACL view permission. The companion method correctly checks , but skips the equivalent check. Version 8.9.3 patches the issue.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 20, 2026 · NIST NVD

    Detected

    SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 8.9.3, the method retrieves any record by module and ID without checking the current user's ACL view permission. The companion method correctly checks , but skips the equivalent check. Version 8.9.3 patches the issue.

  2. Jun 17, 2026 · NIST NVD

    Updated

    SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 8.9.3, the method retrieves any record by module and ID without checking the current user's ACL view permission. The companion method correctly checks , but skips the equivalent check. Version 8.9.3 patches the issue.

Affected

  • cpe suitecrm/suitecrmversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-32697

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-32697

    SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 8.9.3, the method retrieves any record by module and ID without checking the current user's ACL view permission. The companion

    nvd.nist.gov

References