Exploit for CVE-2020-37094

EspoCRM 5.8.5 contains an authentication vulnerability that allows attackers to access other user accounts by manipulating authorization headers. Attackers can decode and modify Basic Authorization and Espo-Authorization tokens to gain unauthorized access to administrative user information and privileges.

Published: 2026-02-03

CVSS: 9.8

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Download Exploit for CVE-2020-37094 here:

Tip: Download official Tor Browser at https://www.torproject.org/download/ to access .onion links.

Check our portfolio:

https://veletacapital.com/exploit-77-cve-2026-25053/

https://veletacapital.com/exploit-508-cve-2026-2929/

https://veletacapital.com/exploit-582-cve-2026-2777/

https://veletacapital.com/exploit-266-cve-2026-24789/

https://veletacapital.com/exploit-709-cve-2026-3272/