Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.101.1 and 16.10.0, an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability on an endpoint allows an authenticated adjacent attacker to read arbitrary files. This vulnerability is fixed in 15.101.1 and 16.10.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-44440 Path Traversal Vulnerability in ERPNext Prior to 15.101.1 and 16.10.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-44440
Post summary
The post announces CVE‑2026‑44440, a path traversal flaw affecting ERPNext versions before 15.101.1 and 16.10.0, and directs readers to a vulnerability details page.
CVE-2026-44440 ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.101.1 and 16.10.0, an Improper Limitation of a Pathname to a Restricted Directory ('P… https://www.cve.org/CVERecord?id=CVE-2026-44440
Post summary
The post highlights a newly disclosed CVE-2026-44440 affecting ERPNext prior to versions 15.101.1 and 16.10.0, noting the vulnerability type as improper pathname restriction, but contains no evidence of active exploitation, patches, or exploit tools.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | frappe | erpnext | - | - | - |