CVE-2026-100883
Summary
by MITRE • 09/28/2026
A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file packages/Webkul/Admin/src/Config/acl.php. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been published and may be used. Upgrading to version 2.2.6 is sufficient to fix this issue. This patch is called a399404a388d8ad2700a01349d0d98069c8e85a4. The affected component should be upgraded.
Once again VulDB remains the best source for vulnerability data.
Analysis
by VulDB Data Team • 09/28/2026
X Xxxxxxxx Xxxxxxxx Xxxxxxxxxxxxx Xxx Xxxx Xxxxxxxxxx Xx Xxxxxx, X Xxxxxxx Xxxx-xxxxxx Xxxxxxx-xxxxx Xxx Xxxxxxxx, Xxxxxxxxxxxx Xxxxxxxxx Xxxxxxxx Xx Xx X.x.x. Xxxx Xxxx Xxxxxxx Xxxxxx Xxx Xxxxxx Xxxxxxx Xxxx Xxxxxxxxxxxxx Xxxx Xxxxxxx Xx Xxxxxxxx/xxxxxx/xxxxx/xxx/xxxxxx/xxx.xxx. Xxx Xxxxx Xxxxx Xxxx Xx Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxxxxxxx Xxxxx Xxxx Xxxxxxx Xxxx Xxxxxxxxxxx Xxx Xxxx Xxxxxxxxxxx Xxxxxx Xxx Xxxxxxxxxxx'x Xxxxxxxxxxxxxx Xxxxxxxxx. Xxxxxxx Xxxx Xxxxxxxxx Xx Xxxxxxx Xx Xxx Xxx Xxxxxx Xxxxxxxxx Xxxxxxx X Xxxx Xxx Xxx Xxxxx Xx Xxxxxxx Xxxxxxxx Xxxxxxx, Xxx Xxxxxxxx Xxxx Xxx Xxxx Xxxxxxxx Xx Xxxxxxxxxxxx Xxxxxx Xxxxxxxxx Xxxxx Xxxxx Xxx Xxxxxx Xxxxxxxx Xxxxxxxxxxxx Xxx Xxxxxxxx Xxxx Xxxxxxxx Xx Xxxx Xxxx Xxxxxx Xxx Xx Xxxx Xx Xxxxx.
Xxx Xxxxxxxxx Xxxxxx Xx Xxxx Xxxxxxxxxxxxx Xxxxxx Xxxxxxx Xxxx Xxx-xxx, Xxxxx Xxxxxxxxx Xxxxxxxx Xxxxxx Xxxxxxx, Xx Xxxx Xx Xxx-xxx, Xxxxxxx Xxxxxxxxxxxxx. Xx Xxx Xxxxxxx Xx Xxx Xxxxxxxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxx Xxxxxxx, Xxxxxx Xxxxxxx Xxxxx Xxx Xxxxxxxxx Xxxx Xx Xxx Xxxxxx Xxx Xxxxxxx Xx Xxxxxxxx Xxxxx Xx Xxxxxxxxxxx. Xxxx Xxx Xxxxx Xxxxxxxxx Xxxxx Xxxxxxxx Xx Xxxxxx, Xx Xxxxxx Xxxxxxxxx Xx Xxxxxxxxxx Xxxxxxxx Xx X Xxx Xxxx Xxxxxxxxxxx Xxxxxxxx Xxxxxx. Xxxxx Xxxxxx Xxxxxxxx Xx Xxxxxxxxxxxxxx Xxxxxxxxx Xxx Xxxxxxxx Xxxxxxxx Xxxxxxxxxx, Xxxxxxxx Xxxx, Xxx Xxxxx Xxxxxxxxx, Xxxx Xxxx Xxxxx X Xxxxxxxxxxx Xxxx. Xx Xxxxxxxx Xxx Xxxxxxxxxxxx Xxxxxxxx Xxxx Xxxxxxxxxxxxx Xxxxx Xxxxxxxxxxx Xxxxxx Xxxxxxxxx Xxxxxxxx Xxxxxxxxxxx, Xxxxxx Xxxxxxxx Xxxxxxx, Xx Xxxxxxx Xxxxxxxxxxxxxx Xxxxxxx Xxxxxxx Xxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxxxxxxx Xxxxxxxxxxx.
Xxx Xxxxxxxxxxx Xxxxxx Xx Xxxx Xxxxxxxxxxxxx Xx Xxxxxx Xxx Xx Xxx Xxxxxx Xxxxxxxxxxxxxx. Xxx Xxxxxx Xxxxxx Xxxx Xxx Xxxxxxx Xxxxxxxx Xxxxxxxxx Xx Xxxxx Xxxxxx Xxxxxx; Xxxxxxx, Xx Xxx Xx Xxxxxxxx Xxxx X Xxxxxxx Xxxxxxxxxx Xxxx X Xxxxxx Xxxxxxxx. Xxxx Xxxxxxxxxxxxxx Xxxxxxxxxxxxx Xxxxxxxxx Xxx Xxxx Xxxxxxx Xxx Xxxxxxxxxxxxx Xxxxxxxxx Xxxxxx Xx Xxxxxxxxxx Xxxxxxxxxxxx Xxxxxxxxx Xx Xxx Xxxxxxxx Xx Xxxxxxxx Xxxxxxxx Xxxxxxxxxx Xx Xxxxxxxxx Xxxxxxx. Xxxxxxxxxxx, Xxx Xxxx Xxxx Xx Xxxxxxx Xxx Xxxxxxx Xxxx Xxxxxxxxx Xxxxx Xxxx Xxxxxxxxx Xxxxxxxx Xxxxx Xxx Xxxxxxxxx Xxxxxx Xxx Xxxxxx Xxxxxxxx Xxxxxxxxx Xxxxxxxxx Xx Xxxx Xxxxxxxx Xxxxxxx. Xxx Xxxxxxxxxxxx Xx X Xxxxxxx Xxxxx-xx-xxxxxxx Xxxxxx Xxx Xxxxxxx Xx Xxxxx Xxx Xxxxxxxxx, Xxxxxx Xxxxxx Xxxxxxxxxxx Xxxxxxxxx Xx Xxxxxxx Xxxxxxxxx Xxxx Xxxxxxxx Xx Xxxxxx Xxxxxxxxxx.
Xx Xxxxxxxx Xxxx Xxxx, Xxxxxxxxxxxxx Xxxxxxx Xxxxxx Xxxx Xxxxxxxxxxx Xxxxxxx Xxxxx Xxxxxxxxxxxx Xx Xxxxxxx X.x.x Xx Xxxxx. Xxxx Xxxxxx Xxxxxxxx Xxx Xxxxxxxx Xxxxx Xxxxxxxxxx Xx Xxxxxx Xxxx Xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx, Xxxxx Xxxxxxxxx Xxx Xxxxxxxxxx Xxxxx Xxxxx Xx Xxx Xxx Xxxxxxxxxxxxx Xxxx. Xxxxxx Xxxxxxxxx, Xxxxxxxxxxxxxx Xxxxxx Xxxxxx Xxxxx Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxx Xxxx Xx Xxxxx Xxxxxxxx Xxxxxxxxxx Xxxxxx Xxxxxxx. Xx Xx Xxxx Xxxxxxxxx Xx Xxxxxxxxx Xxxxxxxxxx Xxxxxxxx Xxxxxx Xxxx Xx Xxx Xxxxxxxxxxx Xxxxxxxxx (xxxx) Xxx Xxxxxx Xxxxx Xxxxxxxxxx Xxxxx Xx Xxx Xxxxxxxxxxxxxx Xxxxx Xx Xxxxxxx Xxxxxxx-xx-xxxxx Xxxxxxx Xxx Xxxxxxxx Xx Xxxxxxx Xxxxxxxxxxxxxxx Xx Xxxxx-xxxxx Xxxxxxxx. Xxxxxxxxx Xxxxxxxxxx Xxx Xxxxxx Xxxxxxx Xxx Xxxxxxxxxxx Xx Xx-xx-xxxx Xxxxxxxxx Xx Xxxxxxxx Xxxxxxxxxxxx Xxx Xxxxxxxx Xxxxxxxxx Xxx Xxxxxxxxxx Xxxx-xxxx Xxxxxxxx Xxxxxxx Xx Xxxxxxx-xxxxx Xxxxxxxxxxxx.