CVE-2026-7861: Code Injection in Next4Biz's CSM (Customer Service Management)
Deserialization of untrusted data vulnerability in Next4Biz Information Technologies Inc. CSM (Customer Service Management) allows Code Injection.
This issue affects CSM (Customer Service Management): through 07092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
The vector is network-based and requires neither authentication nor user interaction. An unauthenticated remote attacker can exploit it if they can reach an affected CSM deployment.
Which versions are affected?
The advisory identifies CSM (Customer Service Management) versions through 07092026 as affected. No fixed version is provided in the available information.
Is a vendor fix or mitigation available?
The available information does not identify a patch, workaround, or mitigation. It also states that the vendor was contacted early but did not respond.