CVE-2026-86172 in DefaultFuction

Prediction

by VulDB Data Team • 09/05/2026

A vulnerability was detected in DefaultFuction CRM 1.0.0. This impacts an unknown function of the file /modules/customers/delete.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-399310
• CPE: ready
• CWE: CWE-89 (confirmed)
• Exploit: Download
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low
• Sector: Government, Agriculture, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-86172
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-86172
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-86172/