CVE-2026-113643
Deferred
Deferred - Pending Action
Authorization Bypass in EspoCRM PDF Rendering
Vulnerability report for CVE-2026-113643, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-20
Last updated on: 2026-10-20
Assigner: VulDB
Description
Description
A vulnerability was found in EspoCRM up to 9.3.10/10.0.10. This affects the function ImageSourceProvider::get of the file application/Espo/Tools/Pdf/Dompdf/ImageSourceProvider.php of the component PDF Rendering Pipeline. Performing a manipulation of the argument ID results in authorization bypass. The attack may be initiated remotely. The patch is named 91a9edbcedb9c7aa8e3d3ac81d8a7acccb99bca2. It is suggested to install a patch to address this issue.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| n/a | EspoCRM | 9.3.0 |
| n/a | EspoCRM | 9.3.1 |
| n/a | EspoCRM | 9.3.2 |
| n/a | EspoCRM | 9.3.3 |
| n/a | EspoCRM | 9.3.4 |
| n/a | EspoCRM | 9.3.5 |
| n/a | EspoCRM | 9.3.6 |
| n/a | EspoCRM | 9.3.7 |
| n/a | EspoCRM | 9.3.8 |
| n/a | EspoCRM | 9.3.9 |
| n/a | EspoCRM | 9.3.10 |
| n/a | EspoCRM | 10.0.0 |
| n/a | EspoCRM | 10.0.1 |
| n/a | EspoCRM | 10.0.2 |
| n/a | EspoCRM | 10.0.3 |
| n/a | EspoCRM | 10.0.4 |
| n/a | EspoCRM | 10.0.5 |
| n/a | EspoCRM | 10.0.6 |
| n/a | EspoCRM | 10.0.7 |
| n/a | EspoCRM | 10.0.8 |
| n/a | EspoCRM | 10.0.9 |
| n/a | EspoCRM | 10.0.10 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-639 | The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data. |
| CWE-285 | The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action. |
