CVE-2026-4894 | Frappe ERPNext Signup press.api.account.signup email input validation

October 8, 2026 Yanac

A vulnerability marked as critical has been reported in Frappe ERPNext. This affects an unknown part of the file /api/method/press.api.account.signup of the component Signup. The manipulation of the argument email leads to improper input validation.

This vulnerability is uniquely identified as CVE-2026-4894. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More