Where
-Infinity
0

Trending

Last week
Last month
Last year

Frappe ERPNextSQL Injection in Frappe's ERPNext

Risk 49
Severity
7.1
First published (updated )
CVE-2026-12895

Frappe ERPNextERPNext 16.16.0 - Stored XSS in POS cart item rendering

Risk 29
Severity
4.8
First published (updated )
CVE-2026-42839

Frappe ERPNextERPNext 16.16.0 - Stored XSS in POS customer section via unescaped template literals

Risk 32
Severity
5.1
First published (updated )
CVE-2026-42840

Frappe ERPNextERPNext: Unauthorised Document modification due to missing validation

Risk 38
Severity
6.5
First published (updated )
CVE-2026-44448

Frappe ERPNextERPNext: Possibility of SQL Injection due to missing validation

Risk 79
Severity
8.8
First published (updated )
CVE-2026-44447
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frappe ERPNextERPNext: Possibility of SQL Injection due to missing validation

Risk 79
Severity
8.8
First published (updated )
CVE-2026-44446

Frappe ERPNextERPNext: XML External Entity (XEE) Reference Vulnerability in the EDI Module

Risk 38
Severity
5.3
First published (updated )
CVE-2026-44445

Frappe ERPNextERPNext: Possible SSRF by any authenticated user

Risk 26
Severity
5
First published (updated )
CVE-2026-44441

Frappe ERPNextERPNext: Path Traversal Leading to Sensitive File Exposure

Risk 38
Severity
6.5
First published (updated )
CVE-2026-44440

Frappe ERPNextERPNext: Unauthorised Document modification due to missing validation

Risk 82
Severity
9.9
First published (updated )
CVE-2026-44442
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frappe ERPNextFrappe Framework ERPNext 13.4.0 Remote Code Execution

Risk 79
Severity
8.7
First published (updated )
CVE-2023-54345

Frappe ERPNextXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2026-38432

Frappe ERPNextCode Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2026-38431

Frappe ERPNextSSRF

Risk 66
Severity
9.1
First published (updated )
CVE-2026-31017

Frappe ERPNextERP has a possibility SQL Injection vulnerability due to missing validation

Risk 31
Severity
7.5
EPSS
0.03%
First published (updated )
CVE-2026-32954
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frappe ERPNextERP: Document access through endpoints due to missing validation

Risk 47
Severity
9.3
EPSS
0.04%
First published (updated )
CVE-2026-27471

pypi/erpnextXSS

Risk 21
Severity
4.1
First published (updated )
CVE-2025-65924

erpnext/erpnextXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2025-65923

Frappe Frappe FrameworkXSS, Malicious File Upload

Risk 80
Severity
9.6
First published (updated )
CVE-2025-67289

frappe/erpnextCode Injection

Risk 22
Severity
4.3
First published (updated )
CVE-2025-66435
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

pypi/frappeCode Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2025-66434

Frappe ERPNextCode Injection

Risk 22
Severity
4.3
First published (updated )
CVE-2025-66436

pypi/frappeSQL Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2025-66440

pypi/frappeCode Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2025-66437

pypi/frappeSQL Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2025-66439
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

frappe/erpnextCode Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2025-66438

ERPNext ERPNextXSS

Risk 74
Severity
9
First published (updated )
CVE-2025-65267

Frappe ERPNextXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2022-28598

Frappe ERPNextERPNext - Improper user access conrol

Risk 34
Severity
5.5
First published (updated )
CVE-2022-23055

ERPNext ERPNextSQL Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2018-3883
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203