CVE-2026-116492 | Frappe CRM up to 1.89.0 get_contact_by_phone_number authorization

October 26, 2026 Yanac

A vulnerability classified as problematic has been found in Frappe CRM up to 1.89.0. Impacted is an unknown function of the component get_contact_by_phone_number. Performing a manipulation results in missing authorization.

This vulnerability was named CVE-2026-116492. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More