SQL Injection Vulnerability in SuiteCRM Affects Map Marker Endpoint

CVE-2026-69142

What is CVE-2026-69142?

SuiteCRM, a popular open-source Customer Relationship Management software, is susceptible to an SQL injection vulnerability within the jjwg_Maps map marker endpoint. The issue arises from the lack of strict numeric validation and parameterization when processing the authenticated caller's distance value. As a result, an authenticated attacker may manipulate SQL queries, which could lead to unauthorized data extraction, modification of query results, and potential depletion of system resources. This critical issue has been addressed in versions 7.15.2 and 8.10.2, where the necessary security enhancements have been implemented to safeguard against such intrusions.

References