Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Frappe is a full-stack web application framework. Prior to versions 14.100.1 and 15.100.0, an endpoint was vulnerable to SQL injection through specially crafted requests, which would allow a malicious actor to extract sensitive information. This issue has been patched in versions 14.100.1 and 15.100.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-29081 Frappe is a full-stack web application framework. Prior to versions 14.100.1 and 15.100.0, an endpoint was vulnerable to SQL injection through specially crafted reque… https://www.cve.org/CVERecord?id=CVE-2026-29081
Post summary
CVE-2026-29081 reveals a SQL injection flaw in Frappe before versions 14.100.1 and 15.100.0, with the mentioned releases providing a fix.
CVE-2026-29081 SQL Injection Vulnerability in Frappe Web Application Framework Before 14.100.1 and 15.100.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-29081
Post summary
A SQL injection vulnerability (CVE-2026-29081) has been disclosed for Frappe Web Application Framework versions prior to 14.100.1 and 15.100.0.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | frappe | frappe | - | - | - |