CVE-2026-109674 | Frappe ERPNext up to 15.97.x/16.5.x sql injection

A vulnerability classified as critical was found in Frappe ERPNext up to 15.97.x/16.5.x. This issue affects some unknown processing. Such manipulation leads to sql injection.

This vulnerability is referenced as CVE-2026-109674. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More