CVE ID :CVE-2026-109652 Published : Oct. 12, 2026, 11:17 p.m. | 14 minutes ago Description :Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vulnerability because user-controlled message fields are not validated before template rendering,...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-109652 - Frappe ERPNext before 15.119.1 Server-Side Template Injection via Message Fields

VERWANDTEARTIKEL

CVE-2026-85457 - IBM Planning Analytics Local is affected by security vulnerabilities

CVE-2026-93892 - Security Vulnerability identified in IBM TRIRIGA - Information Disclosure in Admin Console

CVE-2026-82103 - DataStage on Cloud Pak for Data Information Disclosure

CVE-2026-82108 - DataStage on Cloud Pak for Data Code Injection

CVE-2026-82110 - DataStage on Cloud Pak for Data Path Traversal

CVE-2026-82096 - DataStage on Cloud Pak for Data Command Injection