All 4 CVE vulnerabilities found in BottleCRM, with AI-generated Chinese analysis, references, and POCs.
Vendor: MicroPyramid
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-110595 | BottleCRM 0.45 through 1.14.5 Memory Exhaustion via Contact and Case CSV Import CWE-770 | 4.3 | Medium | 2026-10-14 |
| CVE-2026-110594 | BottleCRM 0.43 through 1.14.5 ReDoS via Case Routing Rule Regex CWE-1333 | 4.9 | Medium | 2026-10-14 |
| CVE-2026-110593 | BottleCRM through 1.14.5 Server-Side Template Injection via Account Email create_mail CWE-1336 | 5.4 | Medium | 2026-10-14 |
| CVE-2026-110592 | BottleCRM 0.30 through 1.14.5 HTML Injection via Custom Invoice PDF Template CWE-116 | 3.5 | Low | 2026-10-14 |
All 4 known CVE vulnerabilities affecting BottleCRM with full Chinese analysis, references, and POCs where available.