Products: 1
Vulnerabilities: 4
Known Exploited: 0
0
Critical Level Threats
4
High Level Threats
0
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-55550
NextCRM has RBAC Bypass in MCP Product Tools that Allows Low-Privileged Users to Modify the CRM Product Catalog
Last Modified: Jul 23, 2026
Published: Jul 20, 2026
CVE-2026-55544
NextCRM has BOLA/IDOR in MCP Campaign Tools that Allows Cross-User Campaign Disclosure and Tampering
Last Modified: Jul 23, 2026
Published: Jul 20, 2026
CVE-2026-47130
NextCRM has a BOLA/IDOR in PATCH /api/crm/contacts/[id] that allows Cross-Tenant CRM Data Tampering
Last Modified: Jul 23, 2026
Published: Jul 20, 2026
CVE-2026-47129
NextCRM has Broken Access Control in Server Actions that allows any authenticated user to deactivate/activate arbitrary accounts
Last Modified: Jul 23, 2026
Published: Jul 20, 2026
Items Per Page
