CVE-2026-113643Medium· 4.3▾ TwilightPoC availableA vulnerability was found in EspoCRM up to 9.3.10/10.0.10. This affects the function ImageSourceProvider::get of the file application/Espo/Tools/Pdf/Dompdf/ImageSourceProvider.php of the component PDF Rendering Pipeline. Performing a man…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 23.7 · likelihood 0 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
A vulnerability was found in EspoCRM up to 9.3.10/10.0.10. This affects the function ImageSourceProvider::get of the file application/Espo/Tools/Pdf/Dompdf/ImageSourceProvider.php of the component PDF Rendering Pipeline. Performing a manipulation of the argument ID results in authorization bypass. The attack may be initiated remotely. The patch is named 91a9edbcedb9c7aa8e3d3ac81d8a7acccb99bca2. It is suggested to install a patch to address this issue.
EspoCRM 9.3.0EspoCRM 9.3.1EspoCRM 9.3.2EspoCRM 9.3.3EspoCRM 9.3.4EspoCRM 9.3.5EspoCRM 9.3.6EspoCRM 9.3.7EspoCRM 9.3.8EspoCRM 9.3.9EspoCRM 9.3.10EspoCRM 10.0.0EspoCRM 10.0.1EspoCRM 10.0.2EspoCRM 10.0.3EspoCRM 10.0.4EspoCRM 10.0.5EspoCRM 10.0.6EspoCRM 10.0.7EspoCRM 10.0.8EspoCRM 10.0.9EspoCRM 10.0.10Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-46708Medium· 4.3EspoCRM is an open source customer relationship management application
CVE-2026-77460Medium· 6.5EspoCRM is an open source customer relationship management application
CVE-2026-109957Medium· 4.3EspoCRM before 10.0.7 contains an insecure direct object reference vulnerability that allows authenticated users with Import scope access to read other users' attachments by supplying a foreign attachmentId to the Import endpoint
CVE-2026-112043Medium· 6.3calcom cal.com/cal.diy Webhook util.ts createWebhookProcedure authorization
CVE-2026-75505Medium· 6.0EspoCRM is an open source customer relationship management application
CVE-2026-46694Medium· 6.5EspoCRM is an open source customer relationship management application