CVE-2026-109661 | Frappe ERPNext up to 15.115.x/16.26.x improper authorization

October 13, 2026 Yanac

A vulnerability labeled as problematic has been found in Frappe ERPNext up to 15.115.x/16.26.x. This affects an unknown function. Such manipulation leads to improper authorization.

This vulnerability is uniquely identified as CVE-2026-109661. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More