CVE-2026-109654 | Frappe ERPNext up to 15.118.x/16.30.x improper authorization

October 13, 2026 Yanac

A vulnerability has been found in Frappe ERPNext up to 15.118.x/16.30.x and classified as problematic. This issue affects some unknown processing. Performing a manipulation results in improper authorization.

This vulnerability is cataloged as CVE-2026-109654. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More