CVE-2026-29096

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, when creating or editing a report (AOR_Reports module), the `field_function` parameter from POST data is saved directly into the `aor_fields` table without any validation. Later, when the report is executed/viewed, this value is concatenated directly into a SQL SELECT query without sanitization, enabling second-order SQL injection. Any authenticated user with Reports access can extract arbitrary database contents (password hashes, API tokens, config values). On MySQL with FILE privilege, this could lead to RCE via SELECT INTO OUTFILE. Versions 7.15.1 and 8.9.3 patch the issue.

• CWE-89

• https://docs.suitecrm.com/admin/releases/7.15.xRelease Notes
• https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-vh42-gmqm-q55mVendor Advisory

Published

Mar 19, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-29089TimescaleDB is a time-series database for high-performance r…8.8
• CVE-2026-2909A vulnerability was detected in Tenda HG9 300001138. This af…8.8
• CVE-2026-29090### Summary A SQL injection vulnerability exists in Rucio v…8.8
• CVE-2026-29091Locutus brings stdlibs of other programming languages to Jav…8.1
• CVE-2026-29092Kiteworks is a private data network (PDN). Prior to version …7.5
• CVE-2026-29093WWBN AVideo is an open source video platform. Prior to versi…9.8
• CVE-2026-29097SuiteCRM is an open-source, enterprise-ready Customer Relati…7.5
• CVE-2026-29098SuiteCRM is an open-source, enterprise-ready Customer Relati…4.9
• CVE-2026-29099SuiteCRM is an open-source, enterprise-ready Customer Relati…8.8
• CVE-2026-2910A flaw has been found in Tenda HG9 300001138. This vulnerabi…8.8
• CVE-2026-29100SuiteCRM is an open-source, enterprise-ready Customer Relati…6.1
• CVE-2026-29101SuiteCRM is an open-source, enterprise-ready Customer Relati…7.5