CVE-2026-46691Medium· 6.5▾ SunlitEspoCRM is an open source customer relationship management application. Prior to 9.3.7, an authenticated user with Import scope access can send POST /api/v1/Import/{id}/exportErrors with another user's import identifier and retrieve an a…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
EspoCRM is an open source customer relationship management application. Prior to 9.3.7, an authenticated user with Import scope access can send POST /api/v1/Import/{id}/exportErrors with another user's import identifier and retrieve an attachment identifier for a CSV containing rows from that import. The endpoint performs a scope-level check but omits the entity-level ownership check enforced by the Import AccessChecker and sibling Import endpoints. This issue is fixed in version 9.3.7.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-46694Medium· 6.5EspoCRM is an open source customer relationship management application
CVE-2026-46708Medium· 4.3EspoCRM is an open source customer relationship management application
CVE-2026-75505Medium· 6.0EspoCRM is an open source customer relationship management application
CVE-2026-47168Critical· 9.1EspoCRM is an open source customer relationship management application
CVE-2026-53574High· 7.6EspoCRM is an open source customer relationship management application
CVE-2026-53575Low· 2.7EspoCRM is an open source customer relationship management application