crm vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

CR

Product

crm

by frappe · last CVE Oct 26, 2026

5

CVEs

0

On KEV

8.2

Max CVSS

4

New 30D

Vulnerabilities5 In the news0 Timeline

Severity mix

Critical 0High 1Medium 4Low 0

Severity

All severities5 Critical0 High1 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add crm to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-53761	8.2	1%	Sep 4	Frappe CRM: Authentication Bypass via Logged Invitation Keys in crm/api Affected: < 1.73.0
CVE-2026-116492 New	6.5	0%	Oct 26	Frappe CRM before 1.89.1 Missing Authorization via Phone Lookup API Affected: 1.0.0 before 1.89.1
CVE-2026-111937	5.4	0%	Oct 19	Frappe CRM before 1.81.2 Missing Authorization on CRM Notification Records Affected: before 1.81.2
CVE-2026-111938	4.3	0%	Oct 19	Frappe CRM before 1.74.0 Missing Authorization via add_note_to_call_log Affected: before 1.74.0
CVE-2026-108734	4.3	0%	Oct 11	Frappe CRM 1.49.0 through 1.87.0 Missing Authorization via get_linked_docs_of_document Affected: 1.49.0 through 1.87.0