PT-2026-30975

CVE-2026-39351

Published

2026-04-07

Updated

2026-04-07

CVSS 3.1

9.1

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Frappe versions prior to 16.14.0 and 15.104.0

Description Frappe, a full-stack web application framework, allows unrestricted Doctype access via an API exploit.

Recommendations Update to version 16.14.0 or later. Update to version 15.104.0 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

GHSA-8GGW-HFR6-RW3X

Found an issue in the description? Have something to add? Feel free to write us 👾