CVE-2026-72909

ERPNext vulnerability CVE-2026-72909 affects the ReceivablePayableReport path in erpnext/accounts/report/accounts_receivable/accounts_receivable.py. The issue is that the prepare_conditions logic fails to apply Customer and Supplier user permissions to the Payment Ledger Entry dynamic-link party ...

CVE-2026-72909

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.112.0 and 16.23.0, the ReceivablePayableReport prepareconditions path in erpnext/accounts/report/accountsreceivable/accountsreceivable.py does not apply Customer and Supplier user permissions to the Payment Ledger...

CVE-2026-72909 ERPNext: Broken Access Control on certain endpoints

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.112.0 and 16.23.0, the ReceivablePayableReport prepareconditions path in erpnext/accounts/report/accountsreceivable/accountsreceivable.py does not apply Customer and Supplier user permissions to the Payment Ledger...

PT-2026-69977

Name of the Vulnerable Software and Affected Versions ERPNext versions prior to 15.112.0 ERPNext versions prior to 16.23.0 Description An issue exists in the prepare conditions path of the ReceivablePayableReport within erpnext/accounts/report/accounts receivable/accounts receivable.py. The syste...

EUVD-2026-54319

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...

CVE-2026-68823

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...

CVE-2026-68823

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...

CVE-2026-68823

Azure Confidential Ledger is affected by CVE-2026-68823, a remote code execution vulnerability caused by an exposed dangerous method/function. An authorized attacker could exploit this over the network to execute code. The CVSS 3.1 vector is CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H with a bas...

CVE-2026-68823 Azure Confidential Ledger Remote Code Execution Vulnerability

...

CVE-2026-68823 Azure Confidential Ledger Remote Code Execution Vulnerability

...

Azure Confidential Ledger Remote Code Execution Vulnerability

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...

KLA91190 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...

Malicious code in ledger-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440db517e7261bf345aa374ab2afb8d91698929115a8d3d67abd9fbf7018362e The npm package [email protected] presents itself as a Ledger hardware wallet library but ships no wallet functionality index.js is empty. Its...

MAL-2026-12068 Malicious code in ledger-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440db517e7261bf345aa374ab2afb8d91698929115a8d3d67abd9fbf7018362e The npm package [email protected] presents itself as a Ledger hardware wallet library but ships no wallet functionality index.js is empty. Its...

EUVD-2026-47280

Vulnerability in the PeopleSoft Enterprise FIN General Ledger Argentina product of Oracle PeopleSoft component: General Ledger. The supported version that is affected is 9.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

EUVD-2026-47110

Vulnerability in the Oracle iSetup product of Oracle E-Business Suite component: General Ledger Update Transform, Reports. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-47036

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle General Ledger...

EUVD-2026-46872

Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards component: E1 Foundation. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...

CVE-2026-61069

Vulnerability in the PeopleSoft Enterprise FIN General Ledger Argentina product of Oracle PeopleSoft component: General Ledger. The supported version that is affected is 9.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2026-60795

Vulnerability in the Oracle iSetup product of Oracle E-Business Suite component: General Ledger Update Transform, Reports. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...