CVE WATCH / VULNERABILITY DETAIL
CVE-2026-47168
CRITICALCVSS 9.1NVD feed
Published 15 October 2026 · tracked since 16 October 2026
Description
EspoCRM is an open source customer relationship management application. Prior to 9.3.7, an authenticated administrator can supply crafted serialized PHP object data that is stored in background MassAction or Export parameters and later deserialized by the application. The deserialization paths do no
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-111091 HIGH 7.8
- CVE-2026-109449
- CVE-2026-100349
- CVE-2026-9703 HIGH 7.1
- CVE-2026-95179 HIGH 7.5
- CVE-2026-95180 MEDIUM 5.5
- CVE-2026-55154 MEDIUM 5.4
- CVE-2026-109413
- CVE-2026-108082
- CVE-2026-104586