CVE-2026-109652 | Frappe ERPNext up to 15.119.0/16.31.x special elements in template engine

October 13, 2026 Yanac

A vulnerability marked as critical has been reported in Frappe ERPNext up to 15.119.0/16.31.x. The affected element is an unknown function. This manipulation causes improper neutralization of special elements used in a template engine.

The identification of this vulnerability is CVE-2026-109652. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More