CVE-2026-109640 - Frappe ERPNext before 16.22.0 Missing Authorization Allows Unauthorized Record Modification
CVE ID :CVE-2026-109640 Published : Oct. 12, 2026, 11:17 p.m. | 14 minutes ago Description :Frappe ERPNext before 16.22.0 contains a missing authorization vulnerability that allows authenticated users to modify records by invoking endpoints lacking proper authorization checks. Attackers can...