CVE-2026-111388 | Frappe Framework up to 15.119.9/16.32.x IP Allowlist Enforcement access control

October 16, 2026 Yanac

A vulnerability identified as critical has been detected in Frappe Framework up to 15.119.9/16.32.x. The affected element is an unknown function of the component IP Allowlist Enforcement. The manipulation leads to improper access controls.

This vulnerability is documented as CVE-2026-111388. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More