All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-65974
CRITICALpublished 2026-08-17 21:16 UTC · 12 hours ago
9.9
CVSS / 10
// description
ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, limited authenticated users can cross a permission boundary in Frappe safe execution because frappe.render_template is exposed without forcing restrict_globals, allowing server-side template injection and remote code execution. This issue is fixed in versions 15.111.0 and 16.22.0.
// weaknesses (CWE)
- CWE-1336