A vulnerability identified as critical has been detected in SuiteCRM up to 7.15.0/8.9.2. The impacted element is an unknown function of the component Configurator Module. The manipulation leads to unrestricted upload.

This vulnerability is documented as CVE-2026-29104. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.