CVE-2026-115717 | Frappe Builder up to 1.36.0 convert_to_webp server-side request forgery

October 26, 2026 Yanac

A vulnerability classified as problematic has been found in Frappe Builder up to 1.36.0. This issue affects some unknown processing of the component convert_to_webp. This manipulation causes server-side request forgery.

This vulnerability is tracked as CVE-2026-115717. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More