CVE-2026-108373 | Frappe ERPNext up to 15.117.x/16.26.x Sales Person-wise Transaction Summary Report privileges management

October 16, 2026 Yanac

A vulnerability identified as problematic has been detected in Frappe ERPNext up to 15.117.x/16.26.x. This impacts an unknown function of the component Sales Person-wise Transaction Summary Report. This manipulation causes improper privilege management.

This vulnerability is tracked as CVE-2026-108373. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More