CVE-2024-36418

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6.1, a vulnerability in connectors allows an authenticated user to perform a remote code execution attack. Versions 7.14.4 and 8.6.1 contain a fix for this issue.

• CWE-22
• CWE-22

• https://github.com/salesagility/SuiteCRM/security/advisories/GHSA-mfj5-37v4-vh5wThird Party Advisory
• https://github.com/salesagility/SuiteCRM/security/advisories/GHSA-mfj5-37v4-vh5wThird Party Advisory

Published

Jun 10, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-36412SuiteCRM is an open-source Customer Relationship Management …9.8
• CVE-2024-36413SuiteCRM is an open-source Customer Relationship Management …5.4
• CVE-2024-36414SuiteCRM is an open-source Customer Relationship Management …6.5
• CVE-2024-36415SuiteCRM is an open-source Customer Relationship Management …8.8
• CVE-2024-36416SuiteCRM is an open-source Customer Relationship Management …7.5
• CVE-2024-36417SuiteCRM is an open-source Customer Relationship Management …9
• CVE-2024-36419SuiteCRM is an open-source Customer Relationship Management …6.1
• CVE-2024-3642The Newsletter Popup WordPress plugin through 1.2 does not h…6.9
• CVE-2024-36420Flowise is a drag & drop user interface to build a customize…7.5
• CVE-2024-36421Flowise is a drag & drop user interface to build a customize…7.5
• CVE-2024-36422Flowise is a drag & drop user interface to build a customize…6.1
• CVE-2024-36423Flowise is a drag & drop user interface to build a customize…6.1