Junglewise Threat Intelligence

CVE-2026-36340: Krayin CRM allows a remote attacker to execute arbitrary code via compose email function

CVE-2026-36340 · Severity: low · CVSS 3.1 · Published 2026-04-30

Technologies: krayin/laravel-crm (Packagist). Vendors: Packagist.

Executive brief

Krayin CRM allows a remote attacker to execute arbitrary code via compose email function

Affected products

  • Packagist krayin/laravel-crm

Related threats