Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Frappe is a full-stack web application framework. Prior to 15.84.0 and 14.99.0, a specially crafted request made to a certain endpoint could result in SQL injection, allowing an attacker to extract information they wouldn't otherwise be able to. This vulnerability is fixed in 15.84.0 and 14.99.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-31877 Frappe is a full-stack web application framework. Prior to 15.84.0 and 14.99.0, a specially crafted request made to a certain endpoint could result in SQL injection, … https://www.cve.org/CVERecord?id=CVE-2026-31877
Post summary
The notice announces a SQL injection flaw in older Frappe versions, giving technical details but no evidence of exploitation or remediation.
🚨 CVE-2026-31877: Frappe SQL Injection due to impr... Unauthenticated SQLi in Frappe's field sanitization bypasses all access controls - perfect for mass ERPNext data extrac... https://zerodaysignal.com/vulnerability/CVE-2026-31877 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The post announces CVE‑2026‑31877, an unauthenticated SQL injection in Frappe’s field sanitization allowing unrestricted ERPNext data extraction, and provides a link to a zero‑day report but offers no exploit code, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | frappe | frappe | - | - | - |