CVE-2026-109650 | Frappe ERPNext up to 15.111.x/16.22.x improper authorization

October 13, 2026 Yanac

A vulnerability described as problematic has been identified in Frappe ERPNext up to 15.111.x/16.22.x. The impacted element is an unknown function. Such manipulation leads to improper authorization.

This vulnerability is referenced as CVE-2026-109650. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More