[NEU] [mittel] Oracle Siebel CRM: Mehrere Schwachstellen

CVE-2026-33656: EspoCRM ≤ 9.3.3 — Formula engine ACL gap + path traversal → authenticated RCE (full write-up + PoC)

[NEU] [hoch] SuiteCRM: Mehrere Schwachstellen

Perfex CRM: Autologin cookie fed into unserialize() gives unauthenticated RCE

Mass Spam Attacks Leverage Zendesk Instances