CVE-2026-96672 | Frappe ERPNext up to 16.34.0 Financial Report Template frappe.call calculation_formula information disclosure

September 23, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Frappe ERPNext up to 16.34.0. Affected is the function frappe.call of the component Financial Report Template. Executing a manipulation of the argument calculation_formula can lead to information disclosure.

This vulnerability is tracked as CVE-2026-96672. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More