CVE-2026-47422

unknowncovered by 1 sourcefirst seen 2026-07-10

Frappe is a full-stack web application framework. Prior to 15.107.5 and 16.18.2, an endpoint in reportview lacked appropriate permission checks and that has since been fixed. This vulnerability is fixed in 15.107.5 and 16.18.2.

⚡ Watch CVE-2026-47422

Get an email if CVE-2026-47422 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (1)

unknownCVE-2026-47422: Frappe is a full-stack web application framework. Prior to 15.107.5 and 16.18.2, an endpoint i…nvd · 2026-07-10

External references

NVD record for CVE-2026-47422

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-47422 status](https://www.csirts.com/badge/CVE-2026-47422)](https://www.csirts.com/cve/CVE-2026-47422)