CVE-2026-108373Published
ERPNext: Unauthorised access to financial data due to missing validation
Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-108373 · Microsoft / collected KEV context
cve-program · CVE-2026-108373
- https://github.com/frappe/erpnext/security/advisories/GHSA-rgrq-243c-c4g6
- https://github.com/frappe/erpnext/commit/202f52271ca2f689c2836fc27ca30c9cd507958e
- https://github.com/frappe/erpnext/commit/24f0989ac1f6d3054643d6377e8c126ee8ca0cf7
- https://github.com/frappe/erpnext/releases/tag/v15.118.0
- https://github.com/frappe/erpnext/releases/tag/v16.27.0
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.