Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
ERPNext v15.103.1 and before is vulnerable to Server-Side Template Injection (SSTI). An attacker with permission to create or edit email templates can inject template expressions that are executed on the server when the template is rendered.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-12 | 4 | Disclosure3General1 |
| 2026-05-25 | 1 | Patch1 |
--- Validated by the Lyrie Threat Intelligence Pipeline — 3 independent sources confirmed before publication. No speculation. CVE: CVE-2026-38431 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The Lyrie pipeline confirms CVE-2026-38431 as a critical vulnerability with CVSS 9.8, but no PoC, exploit, or patch information is provided.
CVE: CVE-2026-38431 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory ERPNext v15.103.1 and before is vulnerable to Server-Side Template Injection (SSTI).
Post summary
An advisory announces a critical Server‑Side Template Injection vulnerability (CVE‑2026‑38431) in ERPNext v15.103.1 and earlier, assigning a CVSS 9.8 score.
CRITICAL: CVE-2026-38431 (CVSS 9.8) — multiple products. CVE: CVE-2026-38431 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
A critical vulnerability (CVE-2026-38431) with CVSS 9.8 is announced, but no PoC, exploit, or patch information is included.
🚨 CRITICAL: CVE-2026-38431 (CVSS 9.8) ERPNext v15.103.1 & prior vulnerable to Server-Side Template Injection (SSTI). Attackers can inject malicious template expressions via email templates. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/kWiQn6uFkR
Post summary
An alert for a critical SSTI vulnerability in ERPNext v15.103.1 and earlier versions, urging immediate patching to mitigate the CVE-2026-38431 risk.
https://lyrie.ai/research/research/cve-2026-38431-advisory #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The post merely contains a URL and generic hashtags, offering no concrete details about the CVE, so the content is classified as general with low confidence.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | frappe | erpnext | - | - | - |