CVE-2026-69142

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.2 and 8.10.2, the jjwg_Maps map marker endpoint uses the authenticated caller's distance value in the map_markers action without strict numeric validation or parameterization. An authenticated attacker can alter the SQL query, extract database data, modify query results, and consume resources. This issue is fixed in versions 7.15.2 and 8.10.2.

• CWE-89

• https://github.com/SuiteCRM/SuiteCRM-Core/commit/a11f50180d939f639cc468b5d536e8ad714dfb68
• https://github.com/SuiteCRM/SuiteCRM-Core/releases/tag/v8.10.2
• https://github.com/SuiteCRM/SuiteCRM/commit/d6bca97a0159ec019a969b86eca32affab3beb7c
• https://github.com/SuiteCRM/SuiteCRM/releases/tag/v7.15.2
• https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-pjc8-2w2x-xcgf

Published

Nov 5, 2026

Last Modified

Nov 5, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-69135SuiteCRM is an open-source, enterprise-ready Customer Relati…7.1
• CVE-2026-69136SuiteCRM is an open-source, enterprise-ready Customer Relati…7.1
• CVE-2026-69137SuiteCRM is an open-source, enterprise-ready Customer Relati…7.7
• CVE-2026-6914Computing the MD5 checksum of a malformed BSON object under …7.5
• CVE-2026-69140SuiteCRM is an open-source, enterprise-ready Customer Relati…8.3
• CVE-2026-69141SuiteCRM is an open-source, enterprise-ready Customer Relati…8.3
• CVE-2026-69144SuiteCRM is an open-source, enterprise-ready Customer Relati…6.5
• CVE-2026-69145SuiteCRM is an open-source, enterprise-ready Customer Relati…6.5
• CVE-2026-69146MLflow is an open source AI engineering platform for agents,…6.5
• CVE-2026-69147vLLM is an inference and serving engine for large language m…6.5
• CVE-2026-69148MLflow is an open source AI engineering platform for agents,…7.1
• CVE-2026-69149Angular is a development platform for building mobile and de…6.1