Technical documentation https://docs.lime-crm.com/ Thu, 22 Oct 2026 20:57:04 +0000 FeedCreator 1.8 https://docs.lime-crm.com/_media/wiki/logo.png https://docs.lime-crm.com/ https://docs.lime-crm.com/security/lcsec26-10-02?rev=1792673597&do=diff Security Incident Report - PHP Remote Code Execution Vulnerabilities Overview On 21 October 2026 the PHP project published a security advisory covering two critical vulnerabilities in the PHP runtime, informally referred to as “PHP2Shell”. Both allow unauthenticated remote code execution against any PHP installation serving web requests, including PHP-FPM, which the Lime cloud services listed below run on. krzysztof.chlobowski-lime.tech@undisclosed.example.com (Krzysztof Chlobowski) Thu, 22 Oct 2026 12:53:17 +0000 https://docs.lime-crm.com/security/lcsec26-10?rev=1792478271&do=diff Security update for Lime CRM Desktop Client update service Bulletin ID LCSEC26-10 Date published 2026-10-20 Priority 2 Severity Critical Priority and severity ratings are determined as described here. Summary This security update resolves vulnerabilities in the Lime Maintenance Service, which the Lime CRM Desktop Client installs to install updates. The vulnerabilities allow local privilege escalation on Windows. jens.gustafsson-lime.tech@undisclosed.example.com (Jens Gustafsson) Tue, 20 Oct 2026 06:37:51 +0000