CVE-2026-41482

unknowncovered by 1 sourcefirst seen 2026-07-10

Frappe is a full-stack web application framework. Prior to 16.18.3, possible path traversal and local file inclusion were possible through secure local resource access in the Chrome PDF Generator. This issue is fixed in version 16.18.3.

⚡ Watch CVE-2026-41482

Get an email if CVE-2026-41482 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (1)

unknownCVE-2026-41482: Frappe is a full-stack web application framework. Prior to 16.18.3, possible path traversal an…nvd · 2026-07-10

External references

NVD record for CVE-2026-41482

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-41482 status](https://www.csirts.com/badge/CVE-2026-41482)](https://www.csirts.com/cve/CVE-2026-41482)