EXPOSURES › CVE-2026-39351
CVE-2026-39351
CRITICAL
DETAIL
SourceNVD · cve
Published2026-04-07
CVSS9.1
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-39351 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
PLAYERS IMPLICATED
DESCRIPTION
Frappe is a full-stack web application framework. Prior to 16.14.0 and 15.104.0, Frappe allows unrestricted Doctype access via API exploit.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.