Threats Tagged 'cve-2026-113643'
View all threats tagged with 'cve-2026-113643'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-113643'
Click on any threat for detailed analysis and mitigation recommendations
A medium-severity vulnerability (CVE-2026-113643) exists in EspoCRM versions up to 9.3.10 and 10.0.10. It affects the ImageSourceProvider::get function in the PDF Rendering Pipeline component, allowing remote attackers with limited privileges to bypass authorization by manipulating an argument ID. The vulnerability does not impact confidentiality, integrity, or availability beyond limited information disclosure. A patch identified by commit 91a9edbcedb9c7aa8e3d3ac81d8a7acccb99bca2 is available to address this issue. Join the discussion | GCVE Database | 10/20/2026, 21:31:01 UTC Added: 10/20/2026, 22:32:58 UTC |
0 A vulnerability was found in EspoCRM up to 9.3.10/10.0.10. This affects the function ImageSourceProvider::get of the file application/Espo/Tools/Pdf/Dompdf/ImageSourceProvider.php of the component PDF Rendering Pipeline. Performing a manipulation of the argument ID results in authorization bypass. The attack may be initiated remotely. The patch is named 91a9edbcedb9c7aa8e3d3ac81d8a7acccb99bca2. It is suggested to install a patch to address this issue. Join the discussion | CVE Database V5 | 10/20/2026, 18:15:12 UTC Added: 10/20/2026, 18:34:09 UTC |
Showing 1 to 2 of 2 results