Do Son Eight SuiteCRM vulnerabilities, including a CVSS 9.4 remote code execution flaw and SQL injection bugs, are fixed. Upgrade to 8.10.2 or 7.15.2 now.
CRM Security
CVE-2026-34838: A critical 10.0 flaw in GroupOffice allows authenticated users to trigger RCE via insecure deserialization. Update to v26.0.12 immediately!
SuiteCRM released an urgent patch (v8.9.1) for two SQL Injection flaws. The time-based SQLi (CVSS 8.8) and GraphQL SQLi allow authenticated users to extract sensitive customer data from the backend database.