Krayin vulnerabilities

Newest CVEs

• CVE-2026-112288

  Krayin CRM 2.2.5 before 2.2.7 SSRF Filter Bypass via DNS Rebinding

  krayin · laravel-crm

  Low2.1
• CVE-2026-112287

  Krayin CRM before 2.2.7 Broken Object Level Authorization in Mail Module

  krayin · laravel-crm

  High7.1
• CVE-2026-112286

  Krayin CRM before 2.2.7 IDOR via Quote Search and Lead-Products Endpoints

  krayin · laravel-crm

  High7.1
• CVE-2026-100885

  Krayin laravel-crm admin-config-setup API Endpoint CanInstall.php authorization

  Krayin · laravel-crm

  Medium6.9
• CVE-2026-100884

  Krayin laravel-crm attachment-download Endpoint acl.php resource injection

  Krayin · laravel-crm

  Medium5.3
• CVE-2026-100883

  Krayin laravel-crm acl.php access control

  Krayin · laravel-crm

  Medium5.3
• CVE-2026-100882

  Krayin laravel-crm Admin Settings Endpoint index.blade.php cross site scripting

  Krayin · laravel-crm

  Medium4.8
• CVE-2026-97897

  Krayin laravel-crm TinyMCE Media Upload Sanitizer.php cross site scripting

  Krayin · laravel-crm

  Medium5.1
• CVE-2026-97896

  krayin laravel-crm Upload Functionality ConfigurationForm.php rules cross site scripting

  krayin · laravel-crm

  Medium5.1
• CVE-2026-97895

  krayin laravel-crm User Management UserController.php privileges management

  krayin · laravel-crm

  Medium5.3