CVE-2026-109631 | Frappe ERPNext up to 15.119.0/16.31.x sql injection

October 13, 2026 Yanac

A vulnerability marked as critical has been reported in Frappe ERPNext up to 15.119.0/16.31.x. This vulnerability affects unknown code. The manipulation leads to sql injection.

This vulnerability is referenced as CVE-2026-109631. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More