agentprime: frappe-erpnextEvery new CVE for frappe-erpnext.https://agentprime.io/CVE-2026-108373: ERPNext: Unauthorised access to financial data due to missing validationhttps://agentprime.io/advisories/CVE-2026-108373/https://agentprime.io/advisories/CVE-2026-108373/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 20:48:46 GMTCVECVE-2026-108374: ERPNext: Unauthorised status modification due to missing validationhttps://agentprime.io/advisories/CVE-2026-108374/https://agentprime.io/advisories/CVE-2026-108374/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 20:38:32 GMTCVECVE-2026-109674: Frappe ERPNext before 16.6.0 SQL Injection via Missing Input Validationhttps://agentprime.io/advisories/CVE-2026-109674/https://agentprime.io/advisories/CVE-2026-109674/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:38 GMTCVECVE-2026-109673: Frappe ERPNext before 16.12.0 Stored XSS via Crafted Record Nameshttps://agentprime.io/advisories/CVE-2026-109673/https://agentprime.io/advisories/CVE-2026-109673/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:37 GMTCVECVE-2026-109672: Frappe ERPNext before 15.118.0 Missing Authorization Exposes Financial Datahttps://agentprime.io/advisories/CVE-2026-109672/https://agentprime.io/advisories/CVE-2026-109672/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:36 GMTCVECVE-2026-109671: Frappe ERPNext before 15.113.0 Stored XSS via Profile Field in Portal Pageshttps://agentprime.io/advisories/CVE-2026-109671/https://agentprime.io/advisories/CVE-2026-109671/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:36 GMTCVECVE-2026-109670: Frappe ERPNext before 15.110.0 Stored XSS via Item Record Namehttps://agentprime.io/advisories/CVE-2026-109670/https://agentprime.io/advisories/CVE-2026-109670/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:35 GMTCVECVE-2026-109669: Frappe ERPNext before 15.110.0 Missing Authorization Allows Unauthorized Status Modificationhttps://agentprime.io/advisories/CVE-2026-109669/https://agentprime.io/advisories/CVE-2026-109669/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:34 GMTCVECVE-2026-109668: Frappe ERPNext before 15.110.0 Missing Authorization in Party Record Endpointshttps://agentprime.io/advisories/CVE-2026-109668/https://agentprime.io/advisories/CVE-2026-109668/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:34 GMTCVECVE-2026-109667: Frappe ERPNext before 15.111.0 Privilege Escalation via Unauthorized Record Creationhttps://agentprime.io/advisories/CVE-2026-109667/https://agentprime.io/advisories/CVE-2026-109667/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:33 GMTCVECVE-2026-109666: Frappe ERPNext before 15.110.0 Missing Authorization in Inventory Record Endpointshttps://agentprime.io/advisories/CVE-2026-109666/https://agentprime.io/advisories/CVE-2026-109666/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:32 GMTCVECVE-2026-109665: Frappe ERPNext before 15.108.0 Missing Authorization Allows Master Record Deactivationhttps://agentprime.io/advisories/CVE-2026-109665/https://agentprime.io/advisories/CVE-2026-109665/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:32 GMTCVECVE-2026-109664: Frappe ERPNext before 15.112.0 Missing Authorization Allows Arbitrary Record Modificationhttps://agentprime.io/advisories/CVE-2026-109664/https://agentprime.io/advisories/CVE-2026-109664/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:31 GMTCVECVE-2026-109663: Frappe ERPNext before 15.113.0 SQL Injection via Unvalidated Endpoint Parametershttps://agentprime.io/advisories/CVE-2026-109663/https://agentprime.io/advisories/CVE-2026-109663/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:30 GMTCVECVE-2026-109662: Frappe ERPNext before 15.112.0 Stored XSS via Public Portal Formhttps://agentprime.io/advisories/CVE-2026-109662/https://agentprime.io/advisories/CVE-2026-109662/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:30 GMTCVECVE-2026-109661: Frappe ERPNext before 15.116.0 Missing Authorization Exposes Financial Datahttps://agentprime.io/advisories/CVE-2026-109661/https://agentprime.io/advisories/CVE-2026-109661/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:29 GMTCVECVE-2026-109660: Frappe ERPNext before 15.112.0 Missing Authorization in Production Record Endpointshttps://agentprime.io/advisories/CVE-2026-109660/https://agentprime.io/advisories/CVE-2026-109660/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:28 GMTCVECVE-2026-109659: Frappe ERPNext before 15.113.0 Missing Authorization Exposes Financial Datahttps://agentprime.io/advisories/CVE-2026-109659/https://agentprime.io/advisories/CVE-2026-109659/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:28 GMTCVECVE-2026-109658: Frappe ERPNext before 15.115.0 Missing Authorization on Endpointshttps://agentprime.io/advisories/CVE-2026-109658/https://agentprime.io/advisories/CVE-2026-109658/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:27 GMTCVECVE-2026-109657: Frappe ERPNext 16.x before 16.27.0 Stored XSS via Unescaped Record Namehttps://agentprime.io/advisories/CVE-2026-109657/https://agentprime.io/advisories/CVE-2026-109657/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:27 GMTCVECVE-2026-109656: Frappe ERPNext before 15.118.2 Unauthorized Item Master Data Accesshttps://agentprime.io/advisories/CVE-2026-109656/https://agentprime.io/advisories/CVE-2026-109656/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:26 GMTCVECVE-2026-109655: Frappe ERPNext before 15.115.0 Missing Authorization in Inventory Endpointshttps://agentprime.io/advisories/CVE-2026-109655/https://agentprime.io/advisories/CVE-2026-109655/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:25 GMTCVECVE-2026-109654: Frappe ERPNext before 15.119.0 Missing Authorization in Transactional Email Endpointshttps://agentprime.io/advisories/CVE-2026-109654/https://agentprime.io/advisories/CVE-2026-109654/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:25 GMTCVECVE-2026-109653: Frappe ERPNext before 15.119.0 Stored XSS Leading to Account Takeoverhttps://agentprime.io/advisories/CVE-2026-109653/https://agentprime.io/advisories/CVE-2026-109653/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:24 GMTCVECVE-2026-109652: Frappe ERPNext before 15.119.1 Server-Side Template Injection via Message Fieldshttps://agentprime.io/advisories/CVE-2026-109652/https://agentprime.io/advisories/CVE-2026-109652/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:23 GMTCVECVE-2026-109651: Frappe ERPNext before 15.112.0 Server-Side Request Forgery via Configuration Fieldhttps://agentprime.io/advisories/CVE-2026-109651/https://agentprime.io/advisories/CVE-2026-109651/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:23 GMTCVECVE-2026-109650: Frappe ERPNext before 15.112.0 Missing Authorization Exposes Personal Datahttps://agentprime.io/advisories/CVE-2026-109650/https://agentprime.io/advisories/CVE-2026-109650/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:22 GMTCVECVE-2026-109649: Frappe ERPNext before 15.102.0 SQL Injection via Unvalidated Endpoint Requestshttps://agentprime.io/advisories/CVE-2026-109649/https://agentprime.io/advisories/CVE-2026-109649/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:21 GMTCVECVE-2026-109648: Frappe ERPNext before 15.106.0 SQL Injection via Missing Input Validationhttps://agentprime.io/advisories/CVE-2026-109648/https://agentprime.io/advisories/CVE-2026-109648/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:21 GMTCVECVE-2026-109647: Frappe ERPNext before 15.106.0 SQL Injection via Missing Validationhttps://agentprime.io/advisories/CVE-2026-109647/https://agentprime.io/advisories/CVE-2026-109647/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:20 GMTCVECVE-2026-109646: Frappe ERPNext before 15.106.0 SQL Injection via Missing Validationhttps://agentprime.io/advisories/CVE-2026-109646/https://agentprime.io/advisories/CVE-2026-109646/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:19 GMTCVECVE-2026-109645: Frappe ERPNext before 15.119.0 Unauthorized Record Creation via Missing Authorizationhttps://agentprime.io/advisories/CVE-2026-109645/https://agentprime.io/advisories/CVE-2026-109645/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:19 GMTCVECVE-2026-109644: Frappe ERPNext before 15.119.0 Unauthorized Access to Valuation Datahttps://agentprime.io/advisories/CVE-2026-109644/https://agentprime.io/advisories/CVE-2026-109644/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:18 GMTCVECVE-2026-109643: Frappe ERPNext before 15.111.0 Missing Authorization Exposes Project Datahttps://agentprime.io/advisories/CVE-2026-109643/https://agentprime.io/advisories/CVE-2026-109643/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:17 GMTCVECVE-2026-109642: Frappe ERPNext before 15.110.0 Missing Authorization in Certain Endpointshttps://agentprime.io/advisories/CVE-2026-109642/https://agentprime.io/advisories/CVE-2026-109642/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:17 GMTCVECVE-2026-109641: Frappe ERPNext before 15.110.0 Missing Authorization in Record Creation Endpointshttps://agentprime.io/advisories/CVE-2026-109641/https://agentprime.io/advisories/CVE-2026-109641/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:16 GMTCVECVE-2026-109640: Frappe ERPNext before 16.22.0 Missing Authorization Allows Unauthorized Record Modificationhttps://agentprime.io/advisories/CVE-2026-109640/https://agentprime.io/advisories/CVE-2026-109640/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:16 GMTCVECVE-2026-109639: Frappe ERPNext before 15.102.0 SQL Injection via Unvalidated Endpoint Requestshttps://agentprime.io/advisories/CVE-2026-109639/https://agentprime.io/advisories/CVE-2026-109639/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:15 GMTCVECVE-2026-109638: Frappe ERPNext before 15.110.0 SQL Injection via Missing Input Validationhttps://agentprime.io/advisories/CVE-2026-109638/https://agentprime.io/advisories/CVE-2026-109638/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:14 GMTCVECVE-2026-109637: Frappe ERPNext before 16.14.0 Missing Authorization Allows Master Data Modificationhttps://agentprime.io/advisories/CVE-2026-109637/https://agentprime.io/advisories/CVE-2026-109637/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:14 GMTCVECVE-2026-109636: Frappe ERPNext before 15.115.0 Missing Authorization Exposes Financial Datahttps://agentprime.io/advisories/CVE-2026-109636/https://agentprime.io/advisories/CVE-2026-109636/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:13 GMTCVECVE-2026-109635: Frappe ERPNext before 15.105.0 Missing Authorization in Document Creation Endpointshttps://agentprime.io/advisories/CVE-2026-109635/https://agentprime.io/advisories/CVE-2026-109635/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:12 GMTCVECVE-2026-109634: Frappe ERPNext before 15.121.0 SQL Injection via Unvalidated Endpointshttps://agentprime.io/advisories/CVE-2026-109634/https://agentprime.io/advisories/CVE-2026-109634/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:12 GMTCVECVE-2026-109633: Frappe ERPNext before 15.119.1 Stored XSS via Public Booking Pagehttps://agentprime.io/advisories/CVE-2026-109633/https://agentprime.io/advisories/CVE-2026-109633/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:11 GMTCVECVE-2026-109632: Frappe ERPNext before 15.121.0 Missing Authorization on Certain Endpointshttps://agentprime.io/advisories/CVE-2026-109632/https://agentprime.io/advisories/CVE-2026-109632/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:10 GMTCVECVE-2026-109631: Frappe ERPNext before 15.119.1 SQL Injection via Missing Validationhttps://agentprime.io/advisories/CVE-2026-109631/https://agentprime.io/advisories/CVE-2026-109631/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:10 GMTCVECVE-2026-109630: Frappe ERPNext before 15.121.0 Missing Authorization in Endpointshttps://agentprime.io/advisories/CVE-2026-109630/https://agentprime.io/advisories/CVE-2026-109630/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:09 GMTCVECVE-2026-109629: Frappe ERPNext before 15.121.3 Missing Authorization in Transactional Email Endpointhttps://agentprime.io/advisories/CVE-2026-109629/https://agentprime.io/advisories/CVE-2026-109629/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:09 GMTCVECVE-2026-109628: Frappe ERPNext before 15.121.0 Unauthorized Status Modification via Missing Authorizationhttps://agentprime.io/advisories/CVE-2026-109628/https://agentprime.io/advisories/CVE-2026-109628/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:08 GMTCVECVE-2026-109627: Frappe ERPNext before 15.120.0 Missing Authorization Exposes Financial Datahttps://agentprime.io/advisories/CVE-2026-109627/https://agentprime.io/advisories/CVE-2026-109627/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:22:07 GMTCVE