{"id":"CVE-2026-7782","state":"PUBLISHED","title":"CodeCanyon Perfex CRM Tenant Clients.php project authorization","description":"A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1. This affects the function Clients::project of the file application/controllers/Clients.php of the component Tenant Handler. The manipulation of the argument ID results in authorization bypass. The attack may be performed from remote. The exploit is now public and may be used.","publishedAt":"2026-05-04T22:30:18.897Z","updatedAt":"2026-05-05T14:06:57.794Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["CodeCanyon Perfex CRM"],"affected":[{"vendor":"CodeCanyon","product":"Perfex CRM","versions":[{"version":"3.4.0","status":"affected"},{"version":"3.4.1","status":"affected"}],"modules":["Tenant Handler"]}],"references":["https://vuldb.com/vuln/360979","https://vuldb.com/vuln/360979/cti","https://vuldb.com/submit/807683","https://bytium.com/insights/perfex-crm-3-4-1-cross-tenant-broken-access-control-on-project-discussion-comments"],"weaknesses":["CWE-639","CWE-285"],"ingestedAt":"2026-10-29T20:13:07.220Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/7xxx/CVE-2026-7782.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-7782","state":"PUBLISHED","datePublished":"2026-05-04T22:30:18.897Z","dateUpdated":"2026-05-05T14:06:57.794Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-05-04T15:58:24.488Z"},"containers":{"cna":{"title":"CodeCanyon Perfex CRM Tenant Clients.php project authorization","descriptions":[{"lang":"en","value":"A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1. This affects the function Clients::project of the file application/controllers/Clients.php of the component Tenant Handler. The manipulation of the argument ID results in authorization bypass. The attack may be performed from remote. The exploit is now public and may be used."}],"affected":[{"vendor":"CodeCanyon","product":"Perfex CRM","versions":[{"version":"3.4.0","status":"affected"},{"version":"3.4.1","status":"affected"}],"modules":["Tenant Handler"]}],"references":[{"url":"https://vuldb.com/vuln/360979","name":"VDB-360979 | CodeCanyon Perfex CRM Tenant Clients.php project authorization","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/360979/cti","name":"VDB-360979 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/submit/807683","name":"Submit #807683 | Canyon Perfex CRM  CRM 3.4.1 Improper Authorization","tags":["third-party-advisory"]},{"url":"https://bytium.com/insights/perfex-crm-3-4-1-cross-tenant-broken-access-control-on-project-discussion-comments","tags":["exploit"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":6.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":6.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-639","type":"CWE","lang":"en","description":"Authorization Bypass"}]},{"descriptions":[{"cweId":"CWE-285","type":"CWE","lang":"en","description":"Improper Authorization"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-05-05T10:06:08.763Z"},"timeline":[{"time":"2026-05-04T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-05-04T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-05-05T12:08:01.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Jobyer Ahmed (Bytium)","type":"finder"},{"lang":"en","value":"suffer (VulDB User)","type":"reporter"},{"lang":"en","value":"suffer (VulDB User)","type":"analyst"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-05T14:03:21.294450Z","id":"CVE-2026-7782","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-05T14:06:57.794Z"}}]}}}