https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-18T10:57:18.664907+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-109600 CVE-2026-109600 — Frappe before 16.31.0 Improper Access Control in Document Follow Notifications 2026-10-18T10:57:18.666028+00:00

Affected: frappe

Frappe Framework before 15.118.0 and 16.x before 16.31.0 does not check whether a user account is disabled before sending Document Follow email notifications. A disabled user who previously followed documents continues to receive email updates about activity on those documents after their access should have been revoked.