CVE-2026-47422
Frappe: Unrestricted API access to save_report
CVSS Score
0.0
EPSS Score
0.3%
EPSS Percentile
20th
Frappe is a full-stack web application framework. Prior to 15.107.5 and 16.18.2, an endpoint in reportview lacked appropriate permission checks and that has since been fixed. This vulnerability is fixed in 15.107.5 and 16.18.2.
| CWE | CWE-862 |
| Vendor | frappe |
| Product | frappe |
| Published | Jul 10, 2026 |
| Last Updated | Jul 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for frappe frappe
Be the first to know when new unknown vulnerabilities affecting frappe frappe are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
frappe / frappe
< 15.107.5 >= 16.0.0-beta.1, < 6.18.2