<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: frappe-crm</title><description>Every new CVE for frappe-crm.</description><link>https://agentprime.io/</link><item><title>CVE-2026-116492: Frappe CRM before 1.89.1 Missing Authorization via Phone Lookup API</title><link>https://agentprime.io/advisories/CVE-2026-116492/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-116492/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Oct 2026 12:21:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-111938: Frappe CRM before 1.74.0 Missing Authorization via add_note_to_call_log</title><link>https://agentprime.io/advisories/CVE-2026-111938/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-111938/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 19 Oct 2026 13:55:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-111937: Frappe CRM before 1.81.2 Missing Authorization on CRM Notification Records</title><link>https://agentprime.io/advisories/CVE-2026-111937/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-111937/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 19 Oct 2026 13:55:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-108734: Frappe CRM 1.49.0 through 1.87.0 Missing Authorization via get_linked_docs_of_document</title><link>https://agentprime.io/advisories/CVE-2026-108734/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-108734/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 11 Oct 2026 12:19:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-53761: Frappe CRM: Authentication Bypass via Logged Invitation Keys in crm/api</title><link>https://agentprime.io/advisories/CVE-2026-53761/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-53761/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Sep 2026 18:00:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-68928: Frappe CRM vulnerable to authenticated XSS via website field</title><link>https://agentprime.io/advisories/CVE-2025-68928/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-68928/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 29 Dec 2025 15:06:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-11461: Frappe CRM 1.53.1 — Multiple SQL Injections in Dashboard Controller</title><link>https://agentprime.io/advisories/CVE-2025-11461/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-11461/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 26 Nov 2025 17:45:05 GMT</pubDate><category>CVE</category></item></channel></rss>