CVE-2026-111938 | Frappe CRM up to 1.73.x Call add_note_to_call_log/add_task_to_call_log call_sid improper authorization

October 19, 2026 Yanac

A vulnerability was found in Frappe CRM up to 1.73.x. It has been classified as problematic. This issue affects the function add_note_to_call_log/add_task_to_call_log of the component Call Handler. This manipulation of the argument call_sid causes improper authorization.

This vulnerability is handled as CVE-2026-111938. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More