Skip to content
CVE PROGRAM SOURCE RECORD4.9 Medium

CVE-2026-29101

SuiteCRM Vulnerable to Directory Traversal to DoS in Modules

Description

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, a Denial-of-Service (DoS) vulnerability exists in SuiteCRM modules. Versions 7.15.1 and 8.9.3 patch the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SuiteCRM SuiteCRM

  • < 7.15.1affected
  • >= 8.0.0, < 8.9.3affected

References