CVE-2025-61196

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue in BusinessNext CRMnext v.10.8.3.0 allows a remote attacker to execute arbitrary code via the comments input parameter.

Published 2025-10-30. Last modified 2026-06-17.