CVE WATCH / VULNERABILITY DETAIL
CVE-2026-110593
MEDIUMCVSS 5.4NVD feed
Published 14 October 2026 · tracked since 15 October 2026
Description
BottleCRM through 1.14.5 contains a server-side template injection vulnerability in the send_email Celery task, which compiles the user-supplied AccountEmail message_body with django.template.Template(). Authenticated organization members can submit template tags through POST /api/accounts/<id>/crea
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-96615 MEDIUM 6.5
- CVE-2026-97205 HIGH 8.1
- CVE-2026-97629 MEDIUM 6.5
- CVE-2026-95101 MEDIUM 5.3
- CVE-2026-91184 HIGH 8.8
- CVE-2026-93479 HIGH 8.1
- CVE-2026-94197 HIGH 7.5
- CVE-2026-73800
- CVE-2026-73802
- CVE-2026-60021