CVE-2026-109646 | Frappe ERPNext up to 15.105.x/16.15.x sql injection

A vulnerability, which was classified as critical, has been found in Frappe ERPNext up to 15.105.x/16.15.x. Affected is an unknown function. The manipulation leads to sql injection.

This vulnerability is listed as CVE-2026-109646. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More