CR
Product
crm
by frappe · last CVE Oct 26, 2026
5
CVEs
0
On KEV
8.2
Max CVSS
4
New 30D
Severity mix
Critical 0High 1Medium 4Low 0
Watch

Add crm to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-116492
New
6.5
0%
Oct 26
Frappe CRM before 1.89.1 Missing Authorization via Phone Lookup API
Affected: 1.0.0 before 1.89.1
CVE-2026-111937
5.4
0%
Oct 19
Frappe CRM before 1.81.2 Missing Authorization on CRM Notification Records
Affected: before 1.81.2
CVE-2026-111938
4.3
0%
Oct 19
Frappe CRM before 1.74.0 Missing Authorization via add_note_to_call_log
Affected: before 1.74.0
CVE-2026-108734
4.3
0%
Oct 11
Frappe CRM 1.49.0 through 1.87.0 Missing Authorization via get_linked_docs_of_document
Affected: 1.49.0 through 1.87.0
Showing 4