CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7 matches found

NVD•added 2026/06/12 4:16 p.m.•17 views

CVE-2026-44208

Frappe is a full-stack web application framework. Prior to versions 15.107.0 and 16.17.0, lack of validations in the "submitdiscussion" endpoint allows for unauthorized access to resources. This issue has been patched in versions 15.107.0 and 16.17.0...

6.9CVSS0.00441EPSS

SaveExploits0References1

OSV•added 2026/06/12 2:26 p.m.•19 views

CVE-2026-44208 Frappe: IDOR in `submit_discussion()`

6.9CVSS5.9AI score

SaveExploits0References3

Cvelist•added 2026/06/12 2:26 p.m.•44 views

CVE-2026-44208 Frappe: IDOR in `submit_discussion()`

6.9CVSS0.00441EPSS

SaveExploits0References1

CVE•added 2026/06/12 2:26 p.m.•40 views

CVE-2026-44208

CVE-2026-44208 affects the Frappe framework (full-stack web app). A lack of input/permission validations in the submit_discussion() endpoint allows unauthorized access to resources (IDOR) in affected builds. The issue is fixed in versions 15.107.0 and 16.17.0; prior releases were vulnerable. No e...

6.9CVSS5.7AI score0.00441EPSS

SaveExploits0References1

Vulnrichment•added 2026/06/12 2:26 p.m.•14 views

CVE-2026-44208 Frappe: IDOR in `submit_discussion()`

6.9CVSS5.7AI score0.00441EPSS

SaveExploits0References1

EUVD•added 2026/06/12 2:26 p.m.•24 views

EUVD-2026-36485

6.9CVSS5.2AI score0.00441EPSS

SaveExploits0References1

Positive Technologies•added 2026/06/12 12:00 a.m.•33 views

PT-2026-48891

Frappe is a full-stack web application framework. Prior to versions 15.107.0 and 16.17.0, lack of validations in the "submit discussion" endpoint allows for unauthorized access to resources. This issue has been patched in versions 15.107.0 and 16.17.0...

6.9CVSS5.2AI score0.00441EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by