CVE-2026-109651 | Frappe ERPNext up to 15.111.x/16.22.x server-side request forgery

October 13, 2026 Yanac

A vulnerability was found in Frappe ERPNext up to 15.111.x/16.22.x and classified as problematic. This affects an unknown part. Such manipulation leads to server-side request forgery.

This vulnerability is documented as CVE-2026-109651. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More