https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T00:32:27.959394+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-112286 CVE-2026-112286 — Krayin CRM before 2.2.7 IDOR via Quote Search and Lead-Products Endpoints 2026-10-20T00:32:27.961628+00:00

Affected: krayin laravel-crm

Krayin CRM before 2.2.7 contains an insecure direct object reference vulnerability that allows scope-restricted authenticated users to read other users' quotes by bypassing per-user data scope checks in QuoteController. Attackers can query the quotes search and lead-products endpoints to retrieve quote addresses, totals, contact details, and product pricing belonging to any user or lead.