CVE-2026-50769

9.8 Critique

Publiée le 17/08/2026 à 20:17 · Modifiée le 09/09/2026 à 18:04 · Analyse NVD reportée · Source : cve@mitre.org

Description

The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection (time-based) vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is vulnerable to SQL injection allowing an attacker to execute arbitrary code.

Traduire en français

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.8 Critique	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-89

Références

https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2026-50769
https://www.brainformatik.com/
https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2026-50769

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories