CVE-2026-78277

FluentCRM Pro versions up to 3.1.12 are vulnerable to a Server Side Request Forgery (SSRF) flaw, which could allow an attacker to send unauthorized requests from the server to internal resources, potentially leading to data exposure or further exploitation. Organizations using affected versions should prioritize patching this vulnerability to mitigate risks associated with unauthorized access to sensitive internal services.