mpCRM vulnerabilities

1 known vulnerability in mpCRM from BinSoft. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.4 High severity

  mpGabinet: Use of Client-Side Authentication

  CVE-2026-40551Apr 28, 2026BinSoft

  Multiple BinSoft products perform client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process by manipulating the application binary and authenticate as an arbitrary