← CVE Intelligence

CVE-2026-39351

Frappe allows unrestricted Doctype access via API exploit PUBLISHED

Description (CNA)

Frappe is a full-stack web application framework. Prior to 16.14.0 and 15.104.0, Frappe allows unrestricted Doctype access via API exploit.

Affected (CNA)

Vendor / productVersions
frappe / frappeaffected < 15.104.0; affected >= 16.0.0-beta.1, < 16.14.0

CWE

CWE-862

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.