CVE-2026-109658 | Frappe ERPNext up to 15.114.x/16.25.x improper authorization

October 13, 2026 Yanac

A vulnerability identified as problematic has been detected in Frappe ERPNext up to 15.114.x/16.25.x. The impacted element is an unknown function. This manipulation causes improper authorization.

This vulnerability is handled as CVE-2026-109658. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More