Crmeb

By the Year

In 2026 there have been 11 vulnerabilities in Crmeb with an average score of 6.0 out of ten. Last year, in 2025 Crmeb had 6 security vulnerabilities published. That is, 5 more vulnerabilities have already been reported in 2026 as compared to last year. However, the average CVE base score of the vulnerabilities in 2026 is greater by 0.24.

Recent Crmeb Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-79425	Sep 15, 2026	Authenticated SSRF in CRMEB 6.0.0 /adminapi/file/online_upload An authenticated Server-Side Request Forgery (SSRF) in the /adminapi/file/online_upload component of CRMEB v6.0.0 allows attackers to scan internal resources via a crafted POST request.	Crmeb
CVE-2026-85212	Sep 03, 2026	CVE-2026-85212: CRMEB Auth Bypass in SystemRoleServices VerifyAuth CRMEB contains an authentication bypass vulnerability in the verifyAuth() method of SystemRoleServices.php that returns true from both conditional branches. Sub-administrators and accounts with no roles can access restricted admin endpoints by exploiting the inert role check that always permits requests.	Crmeb
CVE-2026-85177	Sep 03, 2026	CRMEB <6.0.0 MessageSystemController: edit_message allows unauthorized message alter CRMEB through 6.0.0 fails to validate message ownership in the edit_message handler of MessageSystemController.php, allowing authenticated users to modify arbitrary system inbox messages. Attackers can update any message's columns including is_del, look, and uid to delete, mark read, or reassign victim notifications without authorization.	Crmeb
CVE-2026-85040	Sep 03, 2026	RCE via eval in ZhongBangKeJi CRMEB <6.0.0 (Custom Task) A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval of the file /adminapi/system/crontab/save of the component Custom Scheduled Task Feature. This manipulation of the argument customCode causes os command injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Vendor documents this as deliberate debug-only behavior. But isSafePhpCode blacklist offers no real RCE containment.	Crmeb
CVE-2026-10771	Jun 03, 2026	CRMEb_Java 1.4 SSRF via RestTemplate.getForEntity in Base64 QR Endpoint A vulnerability was found in crmeb crmeb_java 1.4. Affected is the function RestTemplate.getForEntity of the file crmeb-common/src/main/java/com/zbkj/common/utils/RestTemplateUtil.java of the component base64 Qrcode Endpoint. The manipulation of the argument url results in server-side request forgery. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.	Crmeb Java
CVE-2026-1734	Feb 01, 2026	Zhong Bang CRMEB 5.6.0-5.6.3 Crontab Endpoint Auth Bypass A security flaw has been discovered in Zhong Bang CRMEB up to 5.6.3. This vulnerability affects unknown code of the file crmeb/app/api/controller/v1/CrontabController.php of the component crontab Endpoint. The manipulation results in missing authorization. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.	Crmeb
CVE-2026-1733	Feb 01, 2026	Zhong Bang CRMEB 5.6.0-5.6.3 detail/tidyOrder auth Bypass A vulnerability was identified in Zhong Bang CRMEB up to 5.6.3. This affects the function detail/tidyOrder of the file /api/store_integral/order/detail/:uni. The manipulation of the argument order_id leads to improper authorization. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.	Crmeb
CVE-2026-1203	Jan 20, 2026	CRMEB <=5.6.3: Remote Auth Bypass via JSON Token Handler A weakness has been identified in CRMEB up to 5.6.3. The impacted element is the function remoteRegister of the file crmeb/app/services/user/LoginServices.php of the component JSON Token Handler. Executing a manipulation of the argument uid can lead to improper authentication. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is regarded as difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.	Crmeb
CVE-2026-1202	Jan 20, 2026	CRMEB <=5.6.3 AppleLogin OpenID Auth Bypass A security flaw has been discovered in CRMEB up to 5.6.3. The affected element is the function appleLogin of the file crmeb/app/api/controller/v1/LoginController.php. Performing a manipulation of the argument openId results in improper authentication. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.	Crmeb
CVE-2025-15443	Jan 04, 2026	SQLi in CRMEB <=5.6.1 via /adminapi/product_export cate_id A vulnerability was identified in CRMEB up to 5.6.1. This issue affects some unknown processing of the file /adminapi/product/product_export. Such manipulation of the argument cate_id leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.	Crmeb