CVE-2026-111938 Frappe CRM before 1.74.0 Missing Authorization via add_note_to_call_log

Frappe CRM before 1.74.0 contains a missing authorization vulnerability that allows authenticated Sales Users to modify other users' call logs by supplying arbitrary callsid values. Attackers can call the addnotetocalllog and addtasktocalllog endpoints to attach attacker-written notes and tasks...

CVE-2026-111938 Frappe CRM before 1.74.0 Missing Authorization via add_note_to_call_log

Frappe CRM before 1.74.0 contains a missing authorization vulnerability that allows authenticated Sales Users to modify other users' call logs by supplying arbitrary callsid values. Attackers can call the addnotetocalllog and addtasktocalllog endpoints to attach attacker-written notes and tasks...

CVE-2026-111937 Frappe CRM before 1.81.2 Missing Authorization on CRM Notification Records

Frappe CRM before 1.81.2 contains a missing authorization vulnerability that allows authenticated Sales Users to access other users' CRM Notification records due to absent permission hooks. Attackers can query frappe.client endpoints filtering on touser or call markasread with another user argume...

CVE-2026-111936 Sigma File Manager through 2.2.0 SSRF via Extension Download Commands

Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validateremoteurl in security.rs never checks resolved IP addresses for extension download commands. A malicious extension or catalog entry can use hostnames resolving to loopback, private, or cloud...

CVE-2026-111937

Frappe CRM versions prior to 1.81.2 are vulnerable to a missing authorization flaw (CWE-862) within the CRM Notification records . Due to the absence of necessary permission hooks, authenticated Sales Users can bypass intended access controls. Specifically, an attacker can query frappe.client end...

CVE-2026-111936

Sigma File Manager versions through 2.2.0 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability. The root cause is that the validate_remote_url() function in security.rs fails to validate resolved IP addresses during extension download commands. An attacker can exploit this by usin...

EUVD-2026-104314

Frappe CRM before 1.81.2 contains a missing authorization vulnerability that allows authenticated Sales Users to access other users' CRM Notification records due to absent permission hooks. Attackers can query frappe.client endpoints filtering on touser or call markasread with another user argume...

CVE-2026-111937 Frappe CRM before 1.81.2 Missing Authorization on CRM Notification Records

Frappe CRM before 1.81.2 contains a missing authorization vulnerability that allows authenticated Sales Users to access other users' CRM Notification records due to absent permission hooks. Attackers can query frappe.client endpoints filtering on touser or call markasread with another user argume...

CVE-2026-111936 Sigma File Manager through 2.2.0 SSRF via Extension Download Commands

Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validateremoteurl in security.rs never checks resolved IP addresses for extension download commands. A malicious extension or catalog entry can use hostnames resolving to loopback, private, or cloud...

EUVD-2026-104315

Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validateremoteurl in security.rs never checks resolved IP addresses for extension download commands. A malicious extension or catalog entry can use hostnames resolving to loopback, private, or cloud...

CVE-2026-111937 Frappe CRM before 1.81.2 Missing Authorization on CRM Notification Records

Frappe CRM before 1.81.2 contains a missing authorization vulnerability that allows authenticated Sales Users to access other users' CRM Notification records due to absent permission hooks. Attackers can query frappe.client endpoints filtering on touser or call markasread with another user argume...

CVE-2026-111935 NoteGen through 0.38.3 Local File Disclosure via Chat Image Analysis

NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing...

EUVD-2026-104316

NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing...

CVE-2026-111935

The software NoteGen through version 0.38.3 is vulnerable to an external control of file path (CWE-73) during chat image analysis. The root cause is the use of unvalidated synced sourceUrl paths , which allows an attacker with write access to the victim's sync target to plant absolute paths or fi...

CVE-2026-111935 NoteGen through 0.38.3 Local File Disclosure via Chat Image Analysis

NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing...

CVE-2026-111935 NoteGen through 0.38.3 Local File Disclosure via Chat Image Analysis

NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing...

CVE-2026-111925 Mopidy before 4.0.5 Path Traversal via File Backend library.lookup

Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/mediadirs because FileLibraryProvider.lookup lacks a containment check. Attackers can call core.library.lookup or core.tracklist.add over JSON-RPC or WebSocket with...

CVE-2026-111915

Versions of Yank Note prior to 3.93.1 are vulnerable to a path traversal vulnerability (CWE-22) via the /api/help endpoint. Unauthenticated remote attackers can bypass single-replacement sanitization by supplying repeated ../ segments in the path or doc parameters. This flaw allows attackers to r...

EUVD-2026-104318

Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via the path or doc parameter of /api/help. Attackers can supply repeated '../' segments, which bypass the single-replacement sanitization in the publicly allowlist...

CVE-2026-111915 Yank Note before 3.93.1 Path Traversal via /api/help Endpoint

Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via the path or doc parameter of /api/help. Attackers can supply repeated '../' segments, which bypass the single-replacement sanitization in the publicly allowlist...