CVE-2026-109644 | Frappe ERPNext up to 15.118.x/16.30.x improper authorization

October 13, 2026 Yanac

A vulnerability labeled as problematic has been found in Frappe ERPNext up to 15.118.x/16.30.x. Impacted is an unknown function. The manipulation results in improper authorization.

This vulnerability was named CVE-2026-109644. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More