CVE-2026-47422

Vulnerability Description

Frappe is a full-stack web application framework. Prior to 15.107.5 and 16.18.2, an endpoint in reportview lacked appropriate permission checks and that has since been fixed. This vulnerability is fixed in 15.107.5 and 16.18.2.

Related Weaknesses (CWE)

CWE-862

References

https://github.com/frappe/frappe/security/advisories/GHSA-w8g7-j846-j248

FAQ

What is CVE-2026-47422?

CVE-2026-47422 is a documented vulnerability. Frappe is a full-stack web application framework. Prior to 15.107.5 and 16.18.2, an endpoint in reportview lacked appropriate permission checks and that has since been fixed. This vulnerability is fix...

How severe is CVE-2026-47422?

CVSS scoring is not yet available for CVE-2026-47422. Check NVD for updates.

Is there a patch for CVE-2026-47422?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.