CVE-2026-109667 - Frappe ERPNext before 15.111.0 Privilege Escalation via Unauthorized Record Creation
CVE ID :CVE-2026-109667 Published : Oct. 12, 2026, 11:17 p.m. | 14 minutes ago Description :Frappe ERPNext before 15.111.0 and 16.x before 16.22.0 contains a privilege escalation vulnerability in a record-creation endpoint that takes the record type from the request and inserts the record...