CVE-2026-72906 ERPNext: Unauthorised triggering of automated emails due to missing validation

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, the sendautoemail function in erpnext/accounts/doctype/processstatementofaccounts/processstatementofaccounts.py lacks a Process Statement Of Accounts permission check, allowing an authenticated...

CVE-2026-72906

CVE-2026-72906 details (NORMAL): ERPNext (open-source ERP) contains a permission validation issue in the send_auto_email function within erpnext/accounts/doctype/process_statement_of_accounts/process_statement_of_accounts.py. The root cause is the absence of a Process Statement Of Accounts permis...

CVE-2018-15668

CVE-2018-15668 affects Bloop Airmail 3.5.9 for macOS. The airmail:// URL scheme’s send command can be invoked by external applications to auto-send emails from the user’s active account, with attachment_ parameters allowing any accessible file path (including relative paths) to be attached withou...

joomla15 -- com_mailto Timeout Issue

Joomla! Security Center reports: In commailto, it was possible to bypass timeout protection against sending automated emails...