CVE-2026-109634 | Frappe ERPNext up to 15.120.x/16.33.x sql injection

SecurityVulns
Yanac

A vulnerability classified as problematic has been found in Frappe ERPNext up to 15.120.x/16.33.x. Impacted is an unknown function. This manipulation causes sql injection.

This vulnerability is tracked as CVE-2026-109634. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More