CVE-2026-40888

CVE-2026-40888 affects Frappe HR (HRMS). Before versions 15.58.1 and 16.4.1, an authenticated user with the default role can access unauthorized information via a vulnerable API endpoint. The issue is resolved in 15.58.1 and 16.4.1, which contain the patch. No workarounds are provided. An authent...

CVE-2021-45222

An issue was discovered in COINS Construction Cloud 11.12. Due to logical flaws in the human ressources interface, it is vulnerable to privilege escalation by HR personnel...