Login Request a demo
CR
Product
CRMEB
by crmeb · last CVE Oct 15, 2026
34
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities34In the news0Timeline
Severity mix
Critical 7High 21Medium 6Low 0
Severity
All severities34Critical7High21Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add CRMEB to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-1202
9.8
1%
Jan 20
CRMEB LoginController.php appleLogin improper authentication
Affected: 5.6.0; 5.6.1; 5.6.2; 5.6.3
CVE-2025-25763
9.8
1%
Mar 6
crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead() in /system/SystemDatabackupServices.php
Affected: 5.4.0
CVE-2023-3234
9.8
1%
Jun 14
Zhong Bang CRMEB PublicController.php put_image deserialization
Affected: through 4.6.0
CVE-2023-3232
9.8
1%
Jun 14
Zhong Bang CRMEB Image Upload app_auth deserialization
Affected: through 4.6.0
CVE-2023-30185
9.8
1%
May 8
CRMEB v4.4 to v4.6 was discovered to contain an arbitrary file upload vulnerability via the component \attachment\SystemAttachmentServices.php
Affected: 4.4.0 through 4.6.0
CVE-2020-21787
9.8
2%
Jun 24
CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php
Affected: 3.1.0+
CVE-2020-25466
9.8
3%
Oct 23
A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on the server and remotely execute arbitrary code
Affected: 3.0
Showing 7