{"id":"CVE-2026-86170","title":"A weakness has been identified in DefaultFuction CRM 1.0.0","summary":"A weakness has been identified in DefaultFuction CRM 1.0.0. The impacted element is an unknown function of the file /modules/orders/edit.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried…","severity":"medium","cvss":6.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-74","CWE-89"],"vendor":"DefaultFuction","product":"CRM","affected":["CRM 1.0.0"],"published":"2026-09-06","updated":"2026-09-09","sourceUpdated":"2026-09-09T14:17:20.540","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86170","references":[{"url":"https://github.com/DefaultFuction/Customer-Relationship-Management-System/issues/3","label":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-86170","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/895742","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399308","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399308/cti","label":"cna@vuldb.com"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T13:52:36.503053Z"},"epss":0.00192,"epssPercentile":0.09157,"ingestedAt":"2026-09-06T16:57:43.759Z","slug":"CVE-2026-86170","body":"## Overview\n\nA weakness has been identified in DefaultFuction CRM 1.0.0. The impacted element is an unknown function of the file /modules/orders/edit.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":47,"depthScoreParts":{"impact":34.7,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[{"seq":202079,"id":"CVE-2026-86170","ts":1789400047956,"field":"exploit_available","old":"false","new":"true"},{"seq":200806,"id":"CVE-2026-86170","ts":1789397616140,"field":"exploit_available","old":"true","new":"false"},{"seq":199499,"id":"CVE-2026-86170","ts":1789395528632,"field":"exploit_available","old":"false","new":"true"},{"seq":198744,"id":"CVE-2026-86170","ts":1789392243809,"field":"exploit_available","old":"true","new":"false"},{"seq":197077,"id":"CVE-2026-86170","ts":1789384292163,"field":"exploit_available","old":"false","new":"true"},{"seq":194206,"id":"CVE-2026-86170","ts":1789378782810,"field":"exploit_available","old":"true","new":"false"},{"seq":192993,"id":"CVE-2026-86170","ts":1789376514815,"field":"exploit_available","old":"false","new":"true"},{"seq":191780,"id":"CVE-2026-86170","ts":1789373630824,"field":"exploit_available","old":"true","new":"false"},{"seq":190565,"id":"CVE-2026-86170","ts":1789369475167,"field":"exploit_available","old":"false","new":"true"},{"seq":189352,"id":"CVE-2026-86170","ts":1789368409127,"field":"exploit_available","old":"true","new":"false"},{"seq":188135,"id":"CVE-2026-86170","ts":1789365230499,"field":"exploit_available","old":"false","new":"true"},{"seq":186922,"id":"CVE-2026-86170","ts":1789363471005,"field":"exploit_available","old":"true","new":"false"},{"seq":185708,"id":"CVE-2026-86170","ts":1789361228867,"field":"exploit_available","old":"false","new":"true"},{"seq":184495,"id":"CVE-2026-86170","ts":1789358363441,"field":"exploit_available","old":"true","new":"false"},{"seq":182746,"id":"CVE-2026-86170","ts":1789354316885,"field":"exploit_available","old":"false","new":"true"},{"seq":181539,"id":"CVE-2026-86170","ts":1789353317419,"field":"exploit_available","old":"true","new":"false"},{"seq":180332,"id":"CVE-2026-86170","ts":1789350284450,"field":"exploit_available","old":"false","new":"true"},{"seq":179125,"id":"CVE-2026-86170","ts":1789348292593,"field":"exploit_available","old":"true","new":"false"},{"seq":177918,"id":"CVE-2026-86170","ts":1789346369755,"field":"exploit_available","old":"false","new":"true"},{"seq":176711,"id":"CVE-2026-86170","ts":1789343184239,"field":"exploit_available","old":"true","new":"false"},{"seq":174828,"id":"CVE-2026-86170","ts":1789334875428,"field":"exploit_available","old":"false","new":"true"},{"seq":173623,"id":"CVE-2026-86170","ts":1789333686602,"field":"exploit_available","old":"true","new":"false"},{"seq":172437,"id":"CVE-2026-86170","ts":1789331092757,"field":"exploit_available","old":"false","new":"true"},{"seq":171251,"id":"CVE-2026-86170","ts":1789328780617,"field":"exploit_available","old":"true","new":"false"},{"seq":170046,"id":"CVE-2026-86170","ts":1789327196893,"field":"exploit_available","old":"false","new":"true"},{"seq":168841,"id":"CVE-2026-86170","ts":1789323839797,"field":"exploit_available","old":"true","new":"false"},{"seq":167636,"id":"CVE-2026-86170","ts":1789319702250,"field":"exploit_available","old":"false","new":"true"},{"seq":166431,"id":"CVE-2026-86170","ts":1789318775857,"field":"exploit_available","old":"true","new":"false"},{"seq":165226,"id":"CVE-2026-86170","ts":1789315789737,"field":"exploit_available","old":"false","new":"true"},{"seq":164021,"id":"CVE-2026-86170","ts":1789313634005,"field":"exploit_available","old":"true","new":"false"},{"seq":162816,"id":"CVE-2026-86170","ts":1789311903161,"field":"exploit_available","old":"false","new":"true"},{"seq":161611,"id":"CVE-2026-86170","ts":1789308732939,"field":"exploit_available","old":"true","new":"false"},{"seq":159724,"id":"CVE-2026-86170","ts":1789300470313,"field":"exploit_available","old":"false","new":"true"},{"seq":156713,"id":"CVE-2026-86170","ts":1789294755377,"field":"exploit_available","old":"true","new":"false"},{"seq":155508,"id":"CVE-2026-86170","ts":1789292967670,"field":"exploit_available","old":"false","new":"true"},{"seq":154303,"id":"CVE-2026-86170","ts":1789289797320,"field":"exploit_available","old":"true","new":"false"},{"seq":151554,"id":"CVE-2026-86170","ts":1789277629604,"field":"exploit_available","old":"false","new":"true"},{"seq":150515,"id":"CVE-2026-86170","ts":1789276245374,"field":"exploit_available","old":"true","new":"false"},{"seq":149482,"id":"CVE-2026-86170","ts":1789273824440,"field":"exploit_available","old":"false","new":"true"},{"seq":148449,"id":"CVE-2026-86170","ts":1789271348466,"field":"exploit_available","old":"true","new":"false"},{"seq":146480,"id":"CVE-2026-86170","ts":1789269397760,"field":"exploit_available","old":"false","new":"true"},{"seq":145285,"id":"CVE-2026-86170","ts":1789266339298,"field":"exploit_available","old":"true","new":"false"},{"seq":144189,"id":"CVE-2026-86170","ts":1789262616483,"field":"exploit_available","old":"false","new":"true"},{"seq":143093,"id":"CVE-2026-86170","ts":1789261533163,"field":"exploit_available","old":"true","new":"false"},{"seq":141924,"id":"CVE-2026-86170","ts":1789258831511,"field":"exploit_available","old":"false","new":"true"},{"seq":140765,"id":"CVE-2026-86170","ts":1789256726883,"field":"exploit_available","old":"true","new":"false"},{"seq":139567,"id":"CVE-2026-86170","ts":1789254831795,"field":"exploit_available","old":"false","new":"true"},{"seq":138369,"id":"CVE-2026-86170","ts":1789251933964,"field":"exploit_available","old":"true","new":"false"},{"seq":137171,"id":"CVE-2026-86170","ts":1789247832523,"field":"exploit_available","old":"false","new":"true"},{"seq":135973,"id":"CVE-2026-86170","ts":1789247055739,"field":"exploit_available","old":"true","new":"false"}]}