https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-16T11:58:42.056676+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-109615 CVE-2026-109615 — Frappe ERPNext before 15.121.0 Missing Authorization in Document Creation Endpoints 2026-10-16T11:58:42.058110+00:00

Affected: frappe erpnext

Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper permission checks during document creation. Authenticated low-privileged users can call these endpoints to create documents against records beyond their permitted role, bypassing role-based access controls.