CVE-2026-90806

A vulnerability has been found in DjangoCRM django-crm up to 1.2. This vulnerability affects the function BulkUpdateCasesView of the file backend/cases/bulk_views.py of the component Bulk Case Update. The manipulation leads to missing authorization. The attack is possible to be carried out remotely. Upgrading to version 1.3.0 is able to resolve this issue. The identifier of the patch is 799bb1210238f402c0c4948c8eedb6e61cd0c8d7. You should upgrade the affected component.

• CWE-862
• CWE-863

• https://github.com/Django-CRM/Django-CRM/commit/799bb1210238f402c0c4948c8eedb6e61cd0c8d7
• https://github.com/Django-CRM/Django-CRM/issues/745
• https://github.com/Django-CRM/Django-CRM/pull/746
• https://github.com/Django-CRM/Django-CRM/releases/tag/v1.3.0
• https://vuldb.com/cve/CVE-2026-90806
• https://vuldb.com/submit/920489
• https://vuldb.com/vuln/403308
• https://vuldb.com/vuln/403308/cti

Published

Sep 14, 2026

Last Modified

Sep 14, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-9080Calling `curl_easy_pause()` within the event-based `CURLMOPT…7.3
• CVE-2026-90801A security flaw has been discovered in GNU Binutils 2.47. Th…5.3
• CVE-2026-90802A weakness has been identified in GNU Binutils 2.47. Affecte…4.4
• CVE-2026-90803A security vulnerability has been detected in GNU Binutils 2…5.3
• CVE-2026-90804A vulnerability was detected in GNU Binutils 2.47. Affected …4.8
• CVE-2026-90805A flaw has been found in subhajitkhan online-clinic-manageme…7.3
• CVE-2026-90807A vulnerability was found in nanocoai NanoClaw up to 2.1.17.…6.3
• CVE-2026-90808A vulnerability was determined in HKUDS nanobot up to 0.2.1.…6.3
• CVE-2026-90809A vulnerability was identified in HKUDS nanobot up to 0.2.1.…7.3
• CVE-2026-9081IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.1…7.1
• CVE-2026-90810A security flaw has been discovered in cosmicstack-labs merc…6.3
• CVE-2026-90811A weakness has been identified in cosmicstack-labs mercury-a…3.3