Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

nextcrm-app — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in nextcrm-app, with AI-generated Chinese analysis, references, and POCs.

Vendor: pdovhomilja

CVE IDTitleCVSSSeverityPublished
CVE-2026-55550 NextCRM has RBAC Bypass in MCP Product Tools that Allows Low-Privileged Users to Modify the CRM Product Catalog CWE-269 7.1 High2026-07-20
CVE-2026-55544 NextCRM has BOLA/IDOR in MCP Campaign Tools that Allows Cross-User Campaign Disclosure and Tampering CWE-284 7.6 High2026-07-20
CVE-2026-47130 NextCRM has a BOLA/IDOR in PATCH /api/crm/contacts/[id] that allows Cross-Tenant CRM Data Tampering CWE-639 7.1 High2026-07-20
CVE-2026-47129 NextCRM has Broken Access Control in Server Actions that allows any authenticated user to deactivate/activate arbitrary accounts CWE-862 8.1 High2026-07-20

All 4 known CVE vulnerabilities affecting nextcrm-app with full Chinese analysis, references, and POCs where available.