What’s Vulnerable › Products

MicroPyramid BottleCRM vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your MicroPyramid BottleCRM version is affected

Latest MicroPyramid BottleCRM vulnerabilities

• CVE-2026-110595 — BottleCRM 0.45 through 1.14.5 Memory Exhaustion via Contact and Case CSV Import (CVSS 4.3)
• CVE-2026-110594 — BottleCRM 0.43 through 1.14.5 ReDoS via Case Routing Rule Regex (CVSS 4.9)
• CVE-2026-110593 — BottleCRM through 1.14.5 Server-Side Template Injection via Account Email create_mail (CVSS 5.4)
• CVE-2026-110592 — BottleCRM 0.30 through 1.14.5 HTML Injection via Custom Invoice PDF Template (CVSS 3.5)