CVE-2026-111389 - Frappe HRMS 14.0.0 before 14.38.2 SQL Injection via Missing Validation
CVE ID :CVE-2026-111389 Published : Oct. 16, 2026, 1:17 a.m. | 2 hours, 16 minutes ago Description :Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before 16.18.0 contains a SQL injection vulnerability in some endpoints caused by missing input validation. Any authenticated...