{"id":"CVE-2026-92298","revision":"32a65c1dbbd648bd83686299bb44deff","records":[{"revision":"32a65c1dbbd648bd83686299bb44deff","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-92298","aliases":[],"title":"EspoCRM through 10.0.8 Weak Token Generation via rand()","description":"EspoCRM through 10.0.8 uses PHP's rand() function to generate tokens for lead-capture opt-in, event invitation, and campaign URLs instead of a cryptographically secure generator. Remote unauthenticated attackers can guess these roughly 31-bit tokens to confirm opt-ins, accept or decline event invitations on behalf of other contacts, and access event details.","state":0,"publishedAt":"2026-09-16T01:57:46.309+00:00","modifiedAt":"2026-10-08T15:51:51.487+00:00","affected":[{"ecosystem":"Vendor product","name":"EspoCRM","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"EspoCRM\",\n                    \"product\": \"EspoCRM\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"packageURL\": \"pkg:github/espocrm/espocrm\",\n                    \"versions\": [\n                        {\n                            \"version\": \"0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\",\n                            \"lessThanOrEqual\": \"10.0.8\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","score":4.8,"severity":"MEDIUM"},{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","score":6.3,"severity":"MEDIUM"}],"references":["https://gist.github.com/kazisabu/9e3109aab24245fde19b88f53f965e93","https://github.com/espocrm/espocrm/commit/8e5555c1ee0ed1e92a9ad54e62f735ac2c4051a1","https://github.com/espocrm/espocrm/blob/10.0.8/application/Espo/Core/Utils/Util.php#L585-L590","https://github.com/espocrm/espocrm/blob/10.0.8/application/Espo/Repositories/UniqueId.php#L47","https://github.com/espocrm/espocrm","https://www.vulncheck.com/advisories/espocrm-through-10.0.8-weak-token-generation-via-rand"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-92298","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-92298","identifiers":["CVE-2026-92298"]},"retained":false,"historicalAffected":[]}],"coverage":[]}