← Database

CVE-2026-27471

CRITICAL CVSS: 9.1 Published: 2026-02-21 Modified: 2026-06-17

Description

ERP is a free and open source Enterprise Resource Planning tool. In versions up to 15.98.0 and 16.0.0-rc.1 and through 16.6.0, certain endpoints lacked access validation which allowed for unauthorized document access. This issue has been fixed in versions 15.98.1 and 16.6.1.

Affected Platforms

Frappe Erpnext

Weakness Type

CWE-284, CWE-306, CWE-862

References