A vulnerability was found in Bottelet DaybydayCRM up to 2.2.1 and classified as problematic. This impacts the function
view of the file app/Http/Controllers/DocumentsController.php. Such manipulation leads to improper authorization.
This vulnerability is traded as CVE-2026-10282. The attack may be launched remotely. There is no exploit available.
It is best practice to apply a patch to resolve this issue.
