CVE-2026-109667 | Frappe ERPNext up to 15.110.x/16.21.x Record Creation Endpoint privileges management

October 13, 2026 Yanac

A vulnerability was found in Frappe ERPNext up to 15.110.x/16.21.x. It has been rated as critical. This affects an unknown function of the component Record Creation Endpoint. This manipulation causes improper privilege management.

This vulnerability appears as CVE-2026-109667. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More