Frappe Erpnext vulnerabilities
59 published vulnerabilities in Frappe Erpnext. The most were published in 2025 (25), and 12 so far in 2026.
Frappe Erpnext vulnerabilities by year
2018
2019
2020
2022
2023
2025
2026
Most exploited Frappe Erpnext vulnerabilities
- CVE-2026-44442 ERPNext: Unauthorised Document modification due to missing validation
- CVE-2026-38431 Code injection in n/a
- CVE-2025-66438 Code injection in n/a
- CVE-2025-66439 SQL injection in n/a
- CVE-2025-66440 SQL injection in n/a
- CVE-2025-67289 File upload in n/a
- CVE-2026-27471 ERP: Document access through endpoints due to missing validation
- CVE-2026-31017 Server-side request forgery in n/a
- CVE-2025-65267 Cross-site scripting in n/a
- CVE-2026-44446 ERPNext: Possibility of SQL Injection due to missing validation
- CVE-2026-44447 ERPNext: Possibility of SQL Injection due to missing validation
- CVE-2025-66434 Code injection in n/a
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.