CVE-2026-109608 - Frappe ERPNext before 15.121.0 SQL Injection via Unvalidated Endpoint Input
CVE ID :CVE-2026-109608 Published : Oct. 12, 2026, 11:17 p.m. | 14 minutes ago Description :Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in several endpoints that lack input validation. Any authenticated user, including one with no assigned...