[ Vendor · 14 CVEs ]
krayin
CVEs affecting krayin published in the last 30 days, plus any krayin CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-112287 | 19 Oct 2026 | CVSS 7.1 | krayin laravel-crmKrayin CRM before 2.2.7 contains a broken object level authorization vulnerability in EmailController write actions that allows scope-restricted… | |
| CVE-2026-112288 | 19 Oct 2026 | CVSS 3.3 | krayin laravel-crmKrayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal… | |
| CVE-2026-112286 | 19 Oct 2026 | CVSS 6.5 | krayin laravel-crmKrayin CRM before 2.2.7 contains an insecure direct object reference vulnerability that allows scope-restricted authenticated users to read other… | |
| CVE-2026-100883 | 27 Sep 2026 | CVSS 6.3 | Krayin laravel-crmA flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file… | |
| CVE-2026-100884 | 27 Sep 2026 | CVSS 4.3 | Krayin laravel-crmA vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file… | |
| CVE-2026-100885 | 27 Sep 2026 | CVSS 7.3 | Krayin laravel-crmA vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the file… | |
| CVE-2026-100882 | 27 Sep 2026 | CVSS 2.4 | Krayin laravel-crmA vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file… | |
| CVE-2026-97897 | 25 Sep 2026 | CVSS 3.5 | Krayin laravel-crmA security flaw has been discovered in Krayin laravel-crm up to 2.2.5. This issue affects some unknown processing of the file Sanitizer.php of the… | |
| CVE-2026-97895 | 25 Sep 2026 | CVSS 6.3 | krayin laravel-crmA vulnerability was determined in krayin laravel-crm up to 2.2.5. This affects an unknown part of the file… | |
| CVE-2026-97896 | 25 Sep 2026 | CVSS 3.5 | krayin laravel-crmA vulnerability was identified in krayin laravel-crm up to 2.2.5. This vulnerability affects the function ConfigurationForm::rules of the file… | |
| CVE-2026-48540 | 24 Sep 2026 | CVSS 5.4 | krayin laravel-crmKrayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary… | |
| CVE-2026-48541 | 24 Sep 2026 | CVSS 5.4 | krayin laravel-crmKrayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary… | |
| CVE-2026-48542 | 24 Sep 2026 | CVSS 5.4 | krayin laravel-crmKrayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary… | |
| CVE-2026-48543 | 24 Sep 2026 | CVSS 5.4 | krayin laravel-crmKrayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary… |