Vulnerabilities

TI-2026-40095 CVE-2026-55550

NextCRM has RBAC Bypass in MCP Product Tools that Allows Low-Privileged Users to Modify the CRM Product Catalog

MEDIUM 64

NextCRM is open-source customer relationship management (CRM) software.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00234 Published 2026-07-20 No fix listed CWE-269

TI-2026-40089 CVE-2026-55544

HIGH 66

NextCRM is open-source customer relationship management (CRM) software.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00222 Published 2026-07-20 No fix listed CWE-284

TI-2026-34721 CVE-2026-47130

MEDIUM 64

NextCRM is open-source customer relationship management (CRM) software.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00199 Published 2026-07-20 Fixed in 0.12.0 CWE-639

TI-2026-34720 CVE-2026-47129

HIGH 68

NextCRM is open-source customer relationship management (CRM) software.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00269 Published 2026-07-20 Fixed in 0.12.0 CWE-862