frappe erpnext vulnerabilities
99 published CVEs name frappe erpnext among the affected products.
- 99Published CVEs99 of them scored
- 98Last 12 monthspublished in the last year
- 4Critical62 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-124316
Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_linked_material_requests
frappe · erpnext
Medium5.3 - CVE-2026-124315
Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_bom_items
frappe · erpnext
High7.1 - CVE-2026-124314
Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_open_activities
frappe · erpnext
High7.1 - CVE-2026-124313
Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_linked_payments_for_doc
frappe · erpnext
Medium5.3 - CVE-2026-108373
ERPNext: Unauthorised access to financial data due to missing validation
frappe · erpnext
Medium6.5 - CVE-2026-108374
ERPNext: Unauthorised status modification due to missing validation
frappe · erpnext
High7.7 - CVE-2026-109674
Frappe ERPNext before 16.6.0 SQL Injection via Missing Input Validation
frappe · erpnext
High7.1 - CVE-2026-109673
Frappe ERPNext before 16.12.0 Stored XSS via Crafted Record Names
frappe · erpnext
High8.5 - CVE-2026-109672
Frappe ERPNext before 15.118.0 Missing Authorization Exposes Financial Data
frappe · erpnext
High7.1 - CVE-2026-109671
Frappe ERPNext before 15.113.0 Stored XSS via Profile Field in Portal Pages
frappe · erpnext
High8.5