CVE-2026-126313 | Frappe HRMS up to 16.20.0 Ownership Check authorization

November 13, 2026 Yanac

A vulnerability classified as problematic has been found in Frappe HRMS up to 16.20.0. This affects an unknown part of the component Ownership Check. The manipulation leads to authorization bypass.

This vulnerability is uniquely identified as CVE-2026-126313. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More