CVE-2026-36340

Published April 30th, 2026

View on NVD ↗

CVSS v3

8.1

HIGH

CVSS v2

N/A

Affected

2

PROJECTS

Description

An issue in Krayin CRM v.2.1.5 and fixed in v.2.1.6 allows a remote attacker to execute arbitrary code via the compose email function

krayin/laravel-crm

Free & Opensource Laravel CRM solution for SMEs and Enterprises for complete customer lifecycle management.

GitHub

22.7K

cybercrewinc/CVE-2026-36340

Remote Code Execution (RCE) Vulnerability in Krayin CRM v2.1.5

GitHub