CVE-2026-126496
4.3 MEDIUMpublic exploit availablePublished 2026-11-11 · Updated 2026-11-11
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
1Panel-dev CordysCRM before 1.9.6 contains an authorization bypass vulnerability in CustomerContactController.get that allows authenticated users to read other users' contacts because no organization, owner or data-scope check is applied. Attackers holding ordinary contact or customer read permission can request GET /account/contact/get/{id} with another contact's ID to obtain names, phone numbers, owners, departments, linked customers and custom fields.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-639
Public exploit & PoC references
- https://github.com/1Panel-dev/CordysCRM
- https://github.com/1Panel-dev/CordysCRM/blob/v1.9.5/backend/crm/src/main/java/cn/cordys/crm/customer/controller/CustomerContactController.java#L96-L102
- https://github.com/1Panel-dev/CordysCRM/blob/v1.9.5/backend/crm/src/main/java/cn/cordys/crm/customer/service/CustomerContactService.java#L220-L226
- https://github.com/1Panel-dev/CordysCRM/commit/a48c6587216810bfad20b398585a51c41842184e
- https://github.com/1Panel-dev/CordysCRM/issues/3891
- https://github.com/1Panel-dev/CordysCRM/releases/tag/v1.9.6
All references
- https://github.com/1Panel-dev/CordysCRM
- https://github.com/1Panel-dev/CordysCRM/blob/v1.9.5/backend/crm/src/main/java/cn/cordys/crm/customer/controller/CustomerContactController.java#L96-L102
- https://github.com/1Panel-dev/CordysCRM/blob/v1.9.5/backend/crm/src/main/java/cn/cordys/crm/customer/service/CustomerContactService.java#L220-L226
- https://github.com/1Panel-dev/CordysCRM/commit/a48c6587216810bfad20b398585a51c41842184e
- https://github.com/1Panel-dev/CordysCRM/issues/3891
- https://github.com/1Panel-dev/CordysCRM/releases/tag/v1.9.6
- https://www.vulncheck.com/advisories/1panel-dev-cordyscrm-before-1.9.6-authorization-bypass-via-account-contact-get-id
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2024-34323
- MEDIUMCVE-2025-71420PoC
- MEDIUMCVE-2026-100142
- UNSCOREDCVE-2026-100177PoC
- HIGHCVE-2026-100268
- MEDIUMCVE-2026-100272
- HIGHCVE-2026-100364PoC
- HIGHCVE-2026-100514
Related by shared AI tags and CWE weakness class. Browse the full archive.