CVE-2026-36340
CVE-2026-36340
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue in Krayin CRM v.2.1.5 and fixed in v.2.1.6 allows a remote attacker to execute arbitrary code via the compose email function
CVSS 8.1 · High · EPSS 0.6% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
krayin/laravel-crm Packagist
- Versions
- 2.1.5
- v2.1.5
- Affected ranges
- ECOSYSTEM: ≥ 2.1.5, < 2.1.6
Update to 2.1.6