CVE detail
CVE-2026-10282
A security vulnerability has been detected in Bottelet DaybydayCRM up to 2.2.1. This impacts the function view of the file app/Http/Controllers/DocumentsController.php. Such manipulation leads to improper authorization. The attack may be launched remotely. It is best practice to apply a patch to resolve this issue.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 22.0 · diversity 6.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
8 source links · newest first
- https://vuldb.com/vuln/367575/ctivuldb.com
No excerpt available.
Exploitvuldb.comJun 1, 2026, 7:16 PM - https://vuldb.com/vuln/367575vuldb.com
No excerpt available.
Exploitvuldb.comJun 1, 2026, 7:16 PM - https://vuldb.com/submit/825440vuldb.com
No excerpt available.
Exploitvuldb.comJun 1, 2026, 7:16 PM - https://vuldb.com/submit/825439vuldb.com
No excerpt available.
Exploitvuldb.comJun 1, 2026, 7:16 PM - https://vuldb.com/cve/CVE-2026-10282vuldb.com
No excerpt available.
Exploitvuldb.comJun 1, 2026, 7:16 PM No excerpt available.
Exploitgithub.comJun 1, 2026, 7:16 PMNo excerpt available.
Exploitgithub.comJun 1, 2026, 7:16 PM- https://github.com/Bottelet/DaybydayCRM/github.com
No excerpt available.
Exploitgithub.comJun 1, 2026, 7:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-16224CVSS 5.3 · Medium
A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown function of the file /jxxghp/MoviePilot of the component Application API. The…
- CVE-2026-16199CVSS 2.1 · Low
A flaw has been found in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This affects the function ExecTool.Execute of the file goclaw/internal/tools/credentialed_exec.go. Executing…
- CVE-2026-16121CVSS 2.1 · Low
A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.2. Affected is the function isSafeBin of the file internal/tools/exec_approval.go. The manipulation leads to i…
- CVE-2026-15594CVSS 2.9 · Low
A vulnerability was found in waooAI waoowaoo up to 0.4.1. Impacted is the function stablePublicIdFromStorageKey in the library src/lib/media/hash.ts of the component Media Handler…
- CVE-2026-15510CVSS 2.1 · Low
A vulnerability was found in Leantime up to 3.8.0. Affected is the function Setting::saveSetting of the component API. The manipulation results in improper authorization. The atta…
- CVE-2026-15509CVSS 2.1 · Low
A vulnerability has been found in Leantime up to 3.8.0. This impacts the function editUser/addUser of the component JSON-RPC Endpoint. The manipulation of the argument role leads…