Remote Code Execution Vulnerability in Krayin CRM by Krayin
CVE-2026-36340

8.1HIGH

Key Information:

Vendor

Krayin

Status
Krayin CRM
Vendor
CVE Published:
30 April 2026

What is CVE-2026-36340?

A vulnerability exists in Krayin CRM version 2.1.5 that permits a remote attacker to execute arbitrary code through the email composition feature. This flaw can potentially allow unauthorized access and manipulation of sensitive data. Users are urged to upgrade to version 2.1.6 or later to safeguard their systems against this security threat.

References

https://drive.google.com/file/d/1yBdvbrXGf9fsFckmK9zTe2v8...
https://github.com/krayin/laravel-crm/releases/tag/v2.1.6
https://github.com/cybercrewinc/CVE-2026-36340

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.