CVE-2026-55796 | Frappe HRMS up to 15.60.2/16.7.0 Salary Payments via ECS Report sql injection

October 16, 2026 Yanac

A vulnerability described as critical has been identified in Frappe HRMS up to 15.60.2/16.7.0. Affected by this issue is some unknown functionality of the component Salary Payments via ECS Report. Executing a manipulation can lead to sql injection.

This vulnerability is registered as CVE-2026-55796. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More