CVE-2026-86172
MEDIUM
NVD
CVSS Score
6.3
Severity
MEDIUM
Published
Sep 06, 2026
Vendor
unknown
Description
A vulnerability was detected in DefaultFuction CRM 1.0.0. This impacts an unknown function of the file /modules/customers/delete.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.