CVE-2019-18785

SuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 mishandles API access tokens and credentials.

• CWE-522

• https://docs.suitecrm.com/admin/releases/7.10.x/#_7_10_21Release Notes, Vendor Advisory
• https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_9Release Notes, Vendor Advisory
• https://docs.suitecrm.com/admin/releases/7.10.x/#_7_10_21Release Notes, Vendor Advisory
• https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_9Release Notes, Vendor Advisory

Published

Mar 20, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-18774Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-1878A vulnerability in the Cisco Discovery Protocol (CDP) implem…7.5
• CVE-2019-18780An arbitrary command injection vulnerability in the Cluster …9.8
• CVE-2019-18781An open redirect vulnerability was discovered in Zoho Manage…6.1
• CVE-2019-18782SuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 …5.3
• CVE-2019-18784SuiteCRM 7.10.x versions prior to 7.10.21 and 7.11.x version…9.8
• CVE-2019-18786In the Linux kernel through 5.3.8, f->fmt.sdr.reserved is un…5.5
• CVE-2019-1879A vulnerability in the CLI of Cisco Integrated Management Co…6.4
• CVE-2019-18790An issue was discovered in channels/chan_sip.c in Sangoma As…6.5
• CVE-2019-18791Lexmark printer MS812 and multiple older generation Lexmark …5.4
• CVE-2019-18792An issue was discovered in Suricata 5.0.0. It is possible to…9.1
• CVE-2019-18793Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR…6.1