CVE-2026-29101CWE-23

SuiteCRM Vulnerable to Directory Traversal to DoS in Modules

Medium · published March 19, 2026

CVSS v3.1
4.9
EPSS
1%
Percentile
46.3
In the wild
Unconfirmed
What it is

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, a Denial-of-Service (DoS) vulnerability exists in SuiteCRM modules. Versions 7.15.1 and 8.9.3 patch the issue.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00567 · 46.3th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2026-03-19T22:51Z
EPSS history
Timeline
  • 19 MAR 22:51Z
    SuiteCRM Vulnerable to Directory Traversal to DoS in Modules
    cvelistv5