[ Vendor · 4 CVEs ]
MicroPyramid
CVEs affecting MicroPyramid published in the last 30 days, plus any MicroPyramid CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-110592 | 14 Oct 2026 | CVSS 3.5 | MicroPyramid BottleCRMBottleCRM 0.30 through 1.14.5 contains an HTML injection vulnerability in render_invoice_template() that allows authenticated organization members to… | |
| CVE-2026-110593 | 14 Oct 2026 | CVSS 5.4 | MicroPyramid BottleCRMBottleCRM through 1.14.5 contains a server-side template injection vulnerability in the send_email Celery task, which compiles the user-supplied… | |
| CVE-2026-110594 | 14 Oct 2026 | CVSS 4.9 | MicroPyramid BottleCRMBottleCRM 0.43 through 1.14.5 contains a regular expression denial of service vulnerability that allows authenticated organization administrators to… | |
| CVE-2026-110595 | 14 Oct 2026 | CVSS 4.3 | MicroPyramid BottleCRMBottleCRM 0.45 through 1.14.5 contains an uncontrolled memory allocation vulnerability in _read_upload() that reads entire CSV uploads before… |