BO
Product
BottleCRM
by MicroPyramid · last CVE Oct 14, 2026
4
CVEs
0
On KEV
5.4
Max CVSS
4
New 30D
Severity mix
Critical 0High 0Medium 3Low 1
Watch

Add BottleCRM to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-110593
5.4
0%
Oct 14
BottleCRM through 1.14.5 Server-Side Template Injection via Account Email create_mail
Affected: through 1.14.5
CVE-2026-110594
4.9
1%
Oct 14
BottleCRM 0.43 through 1.14.5 ReDoS via Case Routing Rule Regex
Affected: 0.43 through 1.14.5
CVE-2026-110595
4.3
1%
Oct 14
BottleCRM 0.45 through 1.14.5 Memory Exhaustion via Contact and Case CSV Import
Affected: 0.45 through 1.14.5
CVE-2026-110592
3.5
0%
Oct 14
BottleCRM 0.30 through 1.14.5 HTML Injection via Custom Invoice PDF Template
Affected: 0.30 through 1.14.5
Showing 4