| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-109654 | Frappe ERPNext before 15.119.0 Missing Authorization in Transactional Email Endpoints | frappe | erpnext | Medium | 5.4 | 2026-10-12 22:22:25 | Deep Dive |
| CVE-2026-109653 | Frappe ERPNext before 15.119.0 Stored XSS Leading to Account Takeover | frappe | erpnext | High | 7.3 | 2026-10-12 22:22:25 | Deep Dive |
| CVE-2026-109652 | Frappe ERPNext before 15.119.1 Server-Side Template Injection via Message Fields | frappe | erpnext | High | 8.8 | 2026-10-12 22:22:24 | Deep Dive |
| CVE-2026-109651 | Frappe ERPNext before 15.112.0 Server-Side Request Forgery via Configuration Field | frappe | erpnext | Medium | 4.3 | 2026-10-12 22:22:23 | Deep Dive |
| CVE-2026-109650 | Frappe ERPNext before 15.112.0 Missing Authorization Exposes Personal Data | frappe | erpnext | Medium | 6.5 | 2026-10-12 22:22:23 | Deep Dive |
| CVE-2026-109649 | Frappe ERPNext before 15.102.0 SQL Injection via Unvalidated Endpoint Requests | frappe | erpnext | Medium | 6.5 | 2026-10-12 22:22:22 | Deep Dive |
| CVE-2026-109647 | Frappe ERPNext before 15.106.0 SQL Injection via Missing Validation | frappe | erpnext | Medium | 6.5 | 2026-10-12 22:22:21 | Deep Dive |
| CVE-2026-109648 | Frappe ERPNext before 15.106.0 SQL Injection via Missing Input Validation | frappe | erpnext | Medium | 6.5 | 2026-10-12 22:22:21 | Deep Dive |
| CVE-2026-109646 | Frappe ERPNext before 15.106.0 SQL Injection via Missing Validation | frappe | erpnext | Medium | 6.5 | 2026-10-12 22:22:20 | Deep Dive |
| CVE-2026-109645 | Frappe ERPNext before 15.119.0 Unauthorized Record Creation via Missing Authorization | frappe | erpnext | Medium | 6.5 | 2026-10-12 22:22:19 | Deep Dive |
| CVE-2026-109644 | Frappe ERPNext before 15.119.0 Unauthorized Access to Valuation Data | frappe | erpnext | Medium | 6.5 | 2026-10-12 22:22:19 | Deep Dive |
| CVE-2026-109643 | Frappe ERPNext before 15.111.0 Missing Authorization Exposes Project Data | frappe | erpnext | Medium | 6.5 | 2026-10-12 22:22:18 | Deep Dive |
| CVE-2026-109642 | Frappe ERPNext before 15.110.0 Missing Authorization in Certain Endpoints | frappe | erpnext | Medium | 4.3 | 2026-10-12 22:22:17 | Deep Dive |
| CVE-2026-109641 | Frappe ERPNext before 15.110.0 Missing Authorization in Record Creation Endpoints | frappe | erpnext | Medium | 6.5 | 2026-10-12 22:22:17 | Deep Dive |
| CVE-2026-109640 | Frappe ERPNext before 16.22.0 Missing Authorization Allows Unauthorized Record Modification | frappe | erpnext | High | 8.1 | 2026-10-12 22:22:16 | Deep Dive |
| CVE-2026-109639 | Frappe ERPNext before 15.102.0 SQL Injection via Unvalidated Endpoint Requests | frappe | erpnext | Medium | 6.5 | 2026-10-12 22:22:15 | Deep Dive |
| CVE-2026-109638 | Frappe ERPNext before 15.110.0 SQL Injection via Missing Input Validation | frappe | erpnext | Medium | 6.5 | 2026-10-12 22:22:15 | Deep Dive |
| CVE-2026-109636 | Frappe ERPNext before 15.115.0 Missing Authorization Exposes Financial Data | frappe | erpnext | Medium | 6.5 | 2026-10-12 22:22:14 | Deep Dive |
| CVE-2026-109637 | Frappe ERPNext before 16.14.0 Missing Authorization Allows Master Data Modification | frappe | erpnext | Medium | 6.5 | 2026-10-12 22:22:14 | Deep Dive |
| CVE-2026-109635 | Frappe ERPNext before 15.105.0 Missing Authorization in Document Creation Endpoints | frappe | erpnext | Medium | 4.3 | 2026-10-12 22:22:13 | Deep Dive |