PT-2026-111042

Name of the Vulnerable Software and Affected Versions Frappe ERPNext versions prior to 15.121.3 Frappe ERPNext versions 16.x prior to 16.35.0 Description An issue exists where an endpoint used for sending transactional emails fails to verify the authorization of the caller. This allows any...

CVE-2026-109614: Missing Authorization

Frappe ERPNext before 16.34.0 contains a missing authorization vulnerability that allows authenticated users to read financial data beyond their permitted role. Attackers can query endpoints lacking proper authorization checks to access sensitive financial records they should not be able to view...

PT-2026-111047

Name of the Vulnerable Software and Affected Versions Frappe ERPNext versions prior to 15.121.0 Frappe ERPNext versions 16.x prior to 16.34.0 Description Missing input validation in certain endpoints allows authenticated attackers with high privileges to execute SQL injection. By sending speciall...

PT-2026-111095

Name of the Vulnerable Software and Affected Versions IBM Planning Analytics versions 2.0 through 2.1 Description Improper output encoding allows a remote authenticated attacker to execute arbitrary JavaScript. This issue occurs when the application fails to correctly sanitize or encode data befo...

PT-2026-110479

Name of the Vulnerable Software and Affected Versions Hotel Booking versions prior to 3.9 Description An Insecure Direct Object Reference IDOR exists where the software fails to verify if a booking record belongs to the user requesting it. This allows any authenticated user, such as a Subscriber,...

Linux Distros Unpatched Vulnerability : CVE-2026-108735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Miniflux 2.3.0 through 2.3.3 contains a server-side request forgery vulnerability that allows authenticated users to reach internal addresses by setting a feed'...

PT-2026-111034

Frappe ERPNext before 15.120.0 and 16.x before 16.23.0 contains an authorization bypass in an endpoint that honours a caller-supplied flag disabling its own permission enforcement. Authenticated attackers can set this flag when calling the endpoint to skip permission checks and read party records...

CVE-2026-109647: Improper Neutralization of Special Elements used in an SQL Command

Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in multiple endpoints caused by missing input validation. Authenticated attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information...

PT-2026-110888

Name of the Vulnerable Software and Affected Versions Temporal Server affected versions not specified Description An issue exists where internal completion callbacks are not bound to the namespace that attached them. This allows an authenticated caller with write permissions in one namespace to...

CVE-2025-71432: Improper Neutralization of Input During Web Page Generation

Frappe ERPNext before 14.92.1 and 15.x before 15.83.0 contains a reflected cross-site scripting vulnerability due to missing input validation on a certain page, allowing arbitrary JavaScript to execute in authenticated sessions. Remote attackers can lure a logged-in user into opening a crafted UR...

PT-2026-111001

Name of the Vulnerable Software and Affected Versions Frappe versions prior to 13.46.3 Frappe versions 14.x prior to 14.21.1 Description Improper access control in Email Template permissions allows any authenticated non-guest user to create and edit any Email Template. This enables attackers with...

PT-2026-110998

Name of the Vulnerable Software and Affected Versions Frappe versions prior to 13.46.1 Frappe versions prior to 14.20.0 Description Authenticated attackers can execute scripts in the browsers of users who view rendered content. This occurs because the html2text function weakly sanitizes...

PT-2026-111061

Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers can send specially crafted requests to inject SQL into database queries and extract sensitive information from the underlying...

PT-2026-111022

Name of the Vulnerable Software and Affected Versions Frappe Framework versions 15.x through 15.107.2 Frappe Framework versions 16.x through 16.16.9 Description The software uses a vulnerable pdfkit library for PDF generation, which allows authenticated attackers to perform server-side request...

PT-2026-111087

Name of the Vulnerable Software and Affected Versions Frappe ERPNext versions prior to 15.98.0 Frappe ERPNext versions 16.x prior to 16.6.0 Description Missing input validation in certain endpoints allows remote authenticated attackers to perform SQL injection. By sending specially crafted...

PT-2026-110953

Name of the Vulnerable Software and Affected Versions Nginx UI versions prior to 2.4.3 Description An authenticated user can manipulate the backup process by creating or modifying an automatic backup. The AutoBackup.GetName function returns a user-controlled name that does not reject path...

PT-2026-111109

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.8 Description A remote authenticated attacker can obtain sensitive information because session tokens are exposed within the HTML response. Recommendations At the moment, there is no...

CVE-2026-93892: Exposure of Sensitive Information to an Unauthorized Actor

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response...

PT-2026-110723

Name of the Vulnerable Software and Affected Versions Craft CMS versions 5.0.0 through 5.10.13 Description An authorization flaw exists in the actionSwitchToLicensedEdition function within the AppController. This issue allows any authenticated user to change the installed software edition...

CVE-2026-109175: Authorization Bypass Through User-Controlled Key

MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators to list other administrators' network-disk files via POST /networkDisk/getFileList. Attackers can query the endpoint, which filters only by status, file type, or filePath and...