Arnasdon

4 CVEs in 1 Arnasdon product, including Wacrm. Newest: CVE-2026-77240 (2026-09-18). Severity, EPSS and public exploits for each.

Arnasdon products with known CVEs

ProductCVEs
Wacrm4
Arnasdon CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-77240Critical9.92026-09-18WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, the profiles_update row-level security policy in supabase/migrations/017_acco…
CVE-2026-77239High8.12026-09-18WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, WACRM flow and automation write routes authenticate account viewers but do no…
CVE-2026-67530Medium6.42026-07-30WACRM is a self-hostable CRM template for WhatsApp. In 0.7.0 and earlier, the automation send_webhook action in src/lib/automations/engine.ts and its validatio…
CVE-2026-49141High7.12026-06-08WACRM prior to commit 73041bf contain an authorization bypass vulnerability in the automation engine that allows authenticated attackers to access and modify c…