CVE-2026-109639 | Frappe ERPNext up to 15.101.x/16.7.x sql injection

October 13, 2026 Yanac

A vulnerability, which was classified as critical, was found in Frappe ERPNext up to 15.101.x/16.7.x. This affects an unknown function. Executing a manipulation can lead to sql injection.

This vulnerability is registered as CVE-2026-109639. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More