CVE-2026-109648 in ERPNextinformazioni

Riassunto

di MITRE • 13/10/2026

Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers can send specially crafted requests to inject SQL into database queries and extract sensitive information from the underlying database.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsabile

VulnCheck

Prenotare

12/10/2026

Divulgazione

13/10/2026

Moderazione

accettato

EPSS

0.00000

KEV

no

Attività

molto basso

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-109648
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-109648
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-109648/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Interested in the pricing of exploits?

See the underground prices here!