CloudConnect CRM flaw reportedly allows data theft without a login

Attackers are exploiting a CloudConnect vulnerability to remotely access and steal customer data and internal business records without logging in, The Tech Edvocate reported. The flaw in the cloud platform, which businesses use to manage customer relationships, was publicly disclosed on October 12, 2026. CyberGuard Labs researchers identified the vulnerability and reported active exploitation. CloudConnect serves thousands of businesses, from startups to multinational corporations. CyberGuard Labs said immediate patching was impossible, leaving users without an available software fix while attackers exploit the flaw.