CVE-2026-10283: Bottelet Daybydaycrm

Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability was detected in Bottelet DaybydayCRM up to 2.2.1. Affected is an unknown function of the component Setting Handler. Performing a manipulation results in missing authentication. Remote exploitation of the attack is possible. It is recommended to apply a patch to fix this issue.

Affected products

• Bottelet Daybydaycrm: version 2.2.0 only; version 2.2.1 only

Published 2026-06-01. Last modified 2026-07-22.