https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T23:11:05.781447+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-40888 CVE-2026-40888 — Frappe HR vulnerable to Improper Access Control 2026-10-15T23:11:05.799465+00:00

Affected: frappe hrms

Frappe HR is an open-source human resources management solution (HRMS). Prior to versions 15.58.1 and 16.4.1, an authenticated user with default role can access unauthorized information by exploiting certain api endpoint. Versions 15.58.1 and 16.4.1 contain a patch. No known workarounds are available.