Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 09:19:10 +0000 CVE-2026-13227 — ERPNext v16.25.0 - Improper authorization in Prospect opportunities API https://cve.radiocsirt.org/vuln/cve-2026-13227 <p><strong>Affected:</strong> Frappe ERPNext</p> <p>An Improper Authorization vulnerability exists in ERPNext version &lt;v16.25.0 and &lt;15.115.0 due to insufficient access control in the whitelisted API method erpnext.crm.doctype.prospect.prospect.get_opportunities.</p> <p>This issue affects ERPNext: before 15.115.0, before 16.26.0.</p> <p><strong>Affected:</strong> Frappe ERPNext</p> <p>An Improper Authorization vulnerability exists in ERPNext version &lt;v16.25.0 and &lt;15.115.0 due to insufficient access control in the whitelisted API method erpnext.crm.doctype.prospect.prospect.get_opportunities.</p> <p>This issue affects ERPNext: before 15.115.0, before 16.26.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-13227