CVE-2026-109647 | Frappe ERPNext up to 15.105.x/16.15.x sql injection

A vulnerability classified as critical has been found in Frappe ERPNext up to 15.105.x/16.15.x. This affects an unknown function. Performing a manipulation results in sql injection.

This vulnerability is identified as CVE-2026-109647. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More