CVE-2026-55154

Published 15 October 2026 · tracked since 16 October 2026

Description

EspoCRM is an open source customer relationship management application. Prior to 9.3.9, application/Espo/Tools/Export/Format/Csv/Processor.php, application/Espo/Tools/Export/Format/Xlsx/OpenSpoutProcessor.php, and application/Espo/Tools/Export/Format/Xlsx/PhpSpreadsheetProcessor.php inspect only the

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-111091 HIGH 7.8
• CVE-2026-109449
• CVE-2026-100349
• CVE-2026-9703 HIGH 7.1
• CVE-2026-95179 HIGH 7.5
• CVE-2026-95180 MEDIUM 5.5
• CVE-2026-47168 CRITICAL 9.1
• CVE-2026-109413
• CVE-2026-108082
• CVE-2026-104586

→ Open the live CVE board · all tools