CVE-2026-33741 — EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below allow authenticated users to upload SVG attachments through normal attachment-capable fields and later — CVE Database · The Intelligence Room