{"id":"CVE-2026-86172","title":"A vulnerability was detected in DefaultFuction CRM 1.0.0","summary":"A vulnerability was detected in DefaultFuction CRM 1.0.0. This impacts an unknown function of the file /modules/customers/delete.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the a…","severity":"medium","cvss":6.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-74","CWE-89"],"vendor":"DefaultFuction","product":"CRM","affected":["CRM 1.0.0"],"published":"2026-09-06","updated":"2026-09-11","sourceUpdated":"2026-09-11T21:17:35.733","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86172","references":[{"url":"https://github.com/DefaultFuction/Customer-Relationship-Management-System/issues/5","label":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-86172","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/895744","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399310","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399310/cti","label":"cna@vuldb.com"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-11T20:05:00.484509Z"},"epss":0.00196,"epssPercentile":0.09656,"ingestedAt":"2026-09-06T18:59:02.271Z","slug":"CVE-2026-86172","body":"## Overview\n\nA vulnerability was detected in DefaultFuction CRM 1.0.0. This impacts an unknown function of the file /modules/customers/delete.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":47,"depthScoreParts":{"impact":34.7,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[{"seq":202080,"id":"CVE-2026-86172","ts":1789400047973,"field":"exploit_available","old":"false","new":"true"},{"seq":200807,"id":"CVE-2026-86172","ts":1789397616154,"field":"exploit_available","old":"true","new":"false"},{"seq":199500,"id":"CVE-2026-86172","ts":1789395528646,"field":"exploit_available","old":"false","new":"true"},{"seq":198745,"id":"CVE-2026-86172","ts":1789392243825,"field":"exploit_available","old":"true","new":"false"},{"seq":197078,"id":"CVE-2026-86172","ts":1789384292175,"field":"exploit_available","old":"false","new":"true"},{"seq":196386,"id":"CVE-2026-86172","ts":1789383756637,"field":"exploit_available","old":"true","new":"false"},{"seq":195831,"id":"CVE-2026-86172","ts":1789380634545,"field":"exploit_available","old":"false","new":"true"},{"seq":194207,"id":"CVE-2026-86172","ts":1789378782824,"field":"exploit_available","old":"true","new":"false"},{"seq":192994,"id":"CVE-2026-86172","ts":1789376514829,"field":"exploit_available","old":"false","new":"true"},{"seq":191781,"id":"CVE-2026-86172","ts":1789373630838,"field":"exploit_available","old":"true","new":"false"},{"seq":190566,"id":"CVE-2026-86172","ts":1789369475184,"field":"exploit_available","old":"false","new":"true"},{"seq":189353,"id":"CVE-2026-86172","ts":1789368409156,"field":"exploit_available","old":"true","new":"false"},{"seq":188136,"id":"CVE-2026-86172","ts":1789365230513,"field":"exploit_available","old":"false","new":"true"},{"seq":186923,"id":"CVE-2026-86172","ts":1789363471020,"field":"exploit_available","old":"true","new":"false"},{"seq":185709,"id":"CVE-2026-86172","ts":1789361228881,"field":"exploit_available","old":"false","new":"true"},{"seq":184496,"id":"CVE-2026-86172","ts":1789358363456,"field":"exploit_available","old":"true","new":"false"},{"seq":182747,"id":"CVE-2026-86172","ts":1789354316899,"field":"exploit_available","old":"false","new":"true"},{"seq":181540,"id":"CVE-2026-86172","ts":1789353317433,"field":"exploit_available","old":"true","new":"false"},{"seq":180333,"id":"CVE-2026-86172","ts":1789350284467,"field":"exploit_available","old":"false","new":"true"},{"seq":179126,"id":"CVE-2026-86172","ts":1789348292609,"field":"exploit_available","old":"true","new":"false"},{"seq":177919,"id":"CVE-2026-86172","ts":1789346369768,"field":"exploit_available","old":"false","new":"true"},{"seq":176712,"id":"CVE-2026-86172","ts":1789343184253,"field":"exploit_available","old":"true","new":"false"},{"seq":174829,"id":"CVE-2026-86172","ts":1789334875441,"field":"exploit_available","old":"false","new":"true"},{"seq":173624,"id":"CVE-2026-86172","ts":1789333686618,"field":"exploit_available","old":"true","new":"false"},{"seq":172438,"id":"CVE-2026-86172","ts":1789331092770,"field":"exploit_available","old":"false","new":"true"},{"seq":171252,"id":"CVE-2026-86172","ts":1789328780632,"field":"exploit_available","old":"true","new":"false"},{"seq":170047,"id":"CVE-2026-86172","ts":1789327196908,"field":"exploit_available","old":"false","new":"true"},{"seq":168842,"id":"CVE-2026-86172","ts":1789323839811,"field":"exploit_available","old":"true","new":"false"},{"seq":167637,"id":"CVE-2026-86172","ts":1789319702267,"field":"exploit_available","old":"false","new":"true"},{"seq":166432,"id":"CVE-2026-86172","ts":1789318775871,"field":"exploit_available","old":"true","new":"false"},{"seq":165227,"id":"CVE-2026-86172","ts":1789315789753,"field":"exploit_available","old":"false","new":"true"},{"seq":164022,"id":"CVE-2026-86172","ts":1789313634019,"field":"exploit_available","old":"true","new":"false"},{"seq":162817,"id":"CVE-2026-86172","ts":1789311903176,"field":"exploit_available","old":"false","new":"true"},{"seq":161612,"id":"CVE-2026-86172","ts":1789308732952,"field":"exploit_available","old":"true","new":"false"},{"seq":159725,"id":"CVE-2026-86172","ts":1789300470326,"field":"exploit_available","old":"false","new":"true"},{"seq":158836,"id":"CVE-2026-86172","ts":1789299572026,"field":"exploit_available","old":"true","new":"false"},{"seq":158292,"id":"CVE-2026-86172","ts":1789296693054,"field":"exploit_available","old":"false","new":"true"},{"seq":156714,"id":"CVE-2026-86172","ts":1789294755391,"field":"exploit_available","old":"true","new":"false"},{"seq":155509,"id":"CVE-2026-86172","ts":1789292967684,"field":"exploit_available","old":"false","new":"true"},{"seq":154304,"id":"CVE-2026-86172","ts":1789289797334,"field":"exploit_available","old":"true","new":"false"},{"seq":151555,"id":"CVE-2026-86172","ts":1789277629618,"field":"exploit_available","old":"false","new":"true"},{"seq":150516,"id":"CVE-2026-86172","ts":1789276245387,"field":"exploit_available","old":"true","new":"false"},{"seq":149483,"id":"CVE-2026-86172","ts":1789273824453,"field":"exploit_available","old":"false","new":"true"},{"seq":148450,"id":"CVE-2026-86172","ts":1789271348480,"field":"exploit_available","old":"true","new":"false"},{"seq":146481,"id":"CVE-2026-86172","ts":1789269397774,"field":"exploit_available","old":"false","new":"true"},{"seq":145286,"id":"CVE-2026-86172","ts":1789266339311,"field":"exploit_available","old":"true","new":"false"},{"seq":144190,"id":"CVE-2026-86172","ts":1789262616496,"field":"exploit_available","old":"false","new":"true"},{"seq":143094,"id":"CVE-2026-86172","ts":1789261533177,"field":"exploit_available","old":"true","new":"false"},{"seq":141925,"id":"CVE-2026-86172","ts":1789258831524,"field":"exploit_available","old":"false","new":"true"},{"seq":140766,"id":"CVE-2026-86172","ts":1789256726897,"field":"exploit_available","old":"true","new":"false"}]}