https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 15:09:33 +0000 https://db.gcve.eu/vuln/cve-2026-109675 <p><strong>Affected:</strong> frappe suite</p> <p>Frappe Suite before commit 2697564a9c46da6acc614743eaf9915fe5238f4f contains a broken access control vulnerability in the get_mailboxes and get_quota APIs that allows authenticated mail users to access other users&#39; data. Attackers can supply another user&#39;s JMAP account ID to read mailbox names, message counts, automation rules with sender addresses, and storage quota usage.</p> <p><strong>Affected:</strong> frappe suite</p> <p>Frappe Suite before commit 2697564a9c46da6acc614743eaf9915fe5238f4f contains a broken access control vulnerability in the get_mailboxes and get_quota APIs that allows authenticated mail users to access other users&#39; data. Attackers can supply another user&#39;s JMAP account ID to read mailbox names, message counts, automation rules with sender addresses, and storage quota usage.</p> https://db.gcve.eu/vuln/cve-2026-109675