CVE-2026-109660 | Frappe ERPNext up to 15.111.x/16.22.x improper authorization

October 13, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Frappe ERPNext up to 15.111.x/16.22.x. The affected element is an unknown function. The manipulation results in improper authorization.

This vulnerability is known as CVE-2026-109660. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More