CVE-2026-111389 | Frappe HRMS prior 14.38.2/15.64.0/16.18.0 sql injection

October 16, 2026 Yanac

A vulnerability classified as critical has been found in Frappe HRMS. Affected is an unknown function. Performing a manipulation results in sql injection.

This vulnerability is known as CVE-2026-111389. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More