CVE-2026-92463Proof of concept (PoC) published · CISA
yshop-crm through 2.1.3 Missing Authorization via Disabled Annotation on System User Listing
CVSS score
7.1
EPSS probability
%0.5
Risk score
0.0
Published
29 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
7.1
CVE-2026-92456
yshop-crm through 2.1.3 Missing Authorization via CRM Customer Rule-Configuration Endpoints
G
Patch status unknownEPSS %0
7.1
CVE-2026-92460
yshop-crm through 2.1.3 Missing Authorization via CRM Operation-Log Listing
G
Patch status unknownEPSS %0
7.1
CVE-2026-92462
yshop-crm through 2.1.3 Missing Authorization via CrmFlowController deleteFlowStep
G
Patch status unknownEPSS %0
7.1
CVE-2026-92459
yshop-crm through 2.1.3 Missing Authorization via CRM Lead-Claim Endpoint
G
Patch status unknownEPSS %0
7.1
CVE-2026-92457
yshop-crm through 2.1.3 Missing Authorization via CrmInvoiceController issueInvoice
G
Patch status unknownEPSS %0
5.3
CVE-2026-92461
yshop-crm through 2.1.3 Missing Authorization via CRM Approval-Chain Endpoint
G
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-92463"