Is CVE-2026-86172 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-86172?

CVE-2026-86172 has a CVSS v3 severity of MEDIUM (6.3).

Back

CVE-2026-86172

Description

A vulnerability was detected in DefaultFuction CRM 1.0.0. This impacts an unknown function of the file /modules/customers/delete.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.