What’s Vulnerable › Products

pdovhomilja nextcrm-app vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your pdovhomilja nextcrm-app version is affected

Latest pdovhomilja nextcrm-app vulnerabilities

• CVE-2026-55550 — NextCRM has RBAC Bypass in MCP Product Tools that Allows Low-Privileged Users to Modify the CRM Product Catalog (CVSS 7.1)
• CVE-2026-55544 — NextCRM has BOLA/IDOR in MCP Campaign Tools that Allows Cross-User Campaign Disclosure and Tampering (CVSS 7.6)
• CVE-2026-47130 — NextCRM has a BOLA/IDOR in PATCH /api/crm/contacts/[id] that allows Cross-Tenant CRM Data Tampering (CVSS 7.1)
• CVE-2026-47129 — NextCRM has Broken Access Control in Server Actions that allows any authenticated user to deactivate/activate arbitrary accounts (CVSS 8.1)