Espocrm — PoC Archivehttps://poc.intelseclab.com/tags/espocrm/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000EspoCRM Authenticated RCE via Formula ACL Bypass + Attachment Path Traversal — CVE-2026-33656https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33656-espocrm-formula-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33656-espocrm-formula-rce/Critical severity — web · CVE-2026-33656. Status: Weaponized. Affects: EspoCRM <= 9.3.3. Tags: espocrm, rce, path-traversal, webshell, htaccess-poisoning, formula-engine, authenticated, crm.webCriticalespocrmrcepath-traversalwebshellhtaccess-poisoningformula-engineauthenticatedcrmEspoCRM 9.3.3 Stored HTML Injection in Email Notifications — CVE-2026-33657https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33657-espocrm-stored-html-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33657-espocrm-stored-html-injection/Medium severity — web · CVE-2026-33657. Status: PoC. Affects: EspoCRM 9.3.3. Tags: espocrm, html-injection, stored-xss, cwe-80, email-notifications, authenticated, crm, template-injection.webMediumespocrmhtml-injectionstored-xsscwe-80email-notificationsauthenticatedcrmtemplate-injectionEspoCRM 9.3.3 Authenticated SSRF via Alternative IPv4 Loopback Notation — CVE-2026-33534https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33534-espocrm-ssrf/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33534-espocrm-ssrf/Medium severity — web · CVE-2026-33534. Status: PoC. Affects: EspoCRM 9.3.3. Tags: espocrm, ssrf, cwe-918, ipv4-obfuscation, authenticated, crm, file-upload, python.webMediumespocrmssrfcwe-918ipv4-obfuscationauthenticatedcrmfile-uploadpython