{"schema":"vulnpedia.research/1","cve":"CVE-2026-112288","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/krayin/laravel-crm/pull/2683","tags":["patch","issue-tracking"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T13:55:31.283Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T13:55:31.283Z","url":"https://github.com/krayin/laravel-crm/pull/2683"},{"source":"nvd","sourceId":"CVE-2026-112288","modified":"2026-10-22T03:16:37.123","url":"https://github.com/krayin/laravel-crm/pull/2683"}]},{"url":"https://github.com/krayin/laravel-crm/commit/64b9125f33a7eb2ef9916d0e5fd8215c7f6a8c28","tags":["patch"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T13:55:31.283Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T13:55:31.283Z","url":"https://github.com/krayin/laravel-crm/commit/64b9125f33a7eb2ef9916d0e5fd8215c7f6a8c28"},{"source":"nvd","sourceId":"CVE-2026-112288","modified":"2026-10-22T03:16:37.123","url":"https://github.com/krayin/laravel-crm/commit/64b9125f33a7eb2ef9916d0e5fd8215c7f6a8c28"}]},{"url":"https://github.com/krayin/laravel-crm/blob/v2.2.6/packages/Webkul/Automation/src/Services/WebhookService.php","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T13:55:31.283Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T13:55:31.283Z","url":"https://github.com/krayin/laravel-crm/blob/v2.2.6/packages/Webkul/Automation/src/Services/WebhookService.php"},{"source":"nvd","sourceId":"CVE-2026-112288","modified":"2026-10-22T03:16:37.123","url":"https://github.com/krayin/laravel-crm/blob/v2.2.6/packages/Webkul/Automation/src/Services/WebhookService.php"}]},{"url":"https://github.com/krayin/laravel-crm/releases/tag/v2.2.7","tags":["release-notes"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T13:55:31.283Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T13:55:31.283Z","url":"https://github.com/krayin/laravel-crm/releases/tag/v2.2.7"},{"source":"nvd","sourceId":"CVE-2026-112288","modified":"2026-10-22T03:16:37.123","url":"https://github.com/krayin/laravel-crm/releases/tag/v2.2.7"}]},{"url":"https://www.vulncheck.com/advisories/krayin-crm-2.2.5-before-2.2.7-ssrf-filter-bypass-via-dns-rebinding","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T13:55:31.283Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T13:55:31.283Z","url":"https://www.vulncheck.com/advisories/krayin-crm-2.2.5-before-2.2.7-ssrf-filter-bypass-via-dns-rebinding"},{"source":"nvd","sourceId":"CVE-2026-112288","modified":"2026-10-22T03:16:37.123","url":"https://www.vulncheck.com/advisories/krayin-crm-2.2.5-before-2.2.7-ssrf-filter-bypass-via-dns-rebinding"}]},{"source":"euvd","sourceId":"EUVD-2026-104285","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104285","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-104285","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104285"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}