https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-17T10:23:14.361584+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-109660 CVE-2026-109660 — Frappe ERPNext before 15.112.0 Missing Authorization in Production Record Endpoints 2026-10-17T10:23:14.363637+00:00

Affected: frappe erpnext

Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 has certain endpoints that do not enforce proper authorization checks on operations that modify production records. An authenticated low-privileged user can send requests to these endpoints to modify production data beyond what their assigned role permits.