← Database

CVE-2026-39351

CRITICAL CVSS: 9.1 Published: 2026-04-07 Modified: 2026-07-24

Description

Frappe is a full-stack web application framework. Prior to 16.14.0 and 15.104.0, Frappe allows unrestricted Doctype access via API exploit.

Affected Platforms

Frappe Frappe

Weakness Type

CWE-862

References