CVE-2026-108733 | Frappe hrms up to 16.10.x expire_allocation improper authorization

October 11, 2026 Yanac

A vulnerability marked as problematic has been reported in Frappe hrms up to 16.10.x. Affected by this issue is the function expire_allocation. Performing a manipulation results in improper authorization.

This vulnerability is reported as CVE-2026-108733. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More