CVE-2026-109635 | Frappe ERPNext up to 15.104.x/16.14.x improper authorization

October 13, 2026 Yanac

A vulnerability described as problematic has been identified in Frappe ERPNext up to 15.104.x/16.14.x. This issue affects some unknown processing. The manipulation results in improper authorization.

This vulnerability is identified as CVE-2026-109635. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More