Sploitus

64 exploited vulnerabilities in Erpnext

Showing 1–50 of 64

Vendors
Frappe, Erpnext, Unknown, Frappé Technologies, Pypi
With known exploits
64
Affected Frappe Erpnext versions
< 16.9.1, 15.103.1, 15.89.0, 16.0.1, 15.83.2, 16.9.0, 15.104.3, 16.14.0, 13.4.0, 11.1.38, 10.1.6, 15.57.5, 14.74.3, 14.82.1, 11.1.47
Affected Frappe versions
= 16.1.1, 15.86.0

Vulnerabilities with exploits

Highest CVSS first — 3 of these already have exploit code on Sploitus

CVE-2026-65974 1 exploit
CVSS 9.9 CRITICAL 2026-08-17FIX AVAILABLE
CVE-2026-72911
CVSS 9.9 CRITICAL 2026-08-10FIX AVAILABLE
CVE-2026-44442
CVSS 9.9 CRITICAL 2026-05-13FIX AVAILABLE
CVE-2026-38431
CVSS 9.8 CRITICAL 2026-05-05FIX AVAILABLE
CVE-2025-66440
CVSS 9.8 CRITICAL 2025-12-15FIX AVAILABLE
CVE-2025-66439
CVSS 9.8 CRITICAL 2025-12-15FIX AVAILABLE
CVE-2025-66438
CVSS 9.8 CRITICAL 2025-12-15
CVE-2026-31017
CVSS 9.1 CRITICAL 2026-04-08FIX AVAILABLE
CVE-2025-65267
CVSS 9.0 CRITICAL 2025-12-03FIX AVAILABLE
CVE-2026-55242
CVSS 8.8 HIGH 2026-07-15FIX AVAILABLE
CVE-2026-44447
CVSS 8.8 HIGH 2026-05-13FIX AVAILABLE
CVE-2026-44446
CVSS 8.8 HIGH 2026-05-13FIX AVAILABLE
CVE-2023-54345
CVSS 8.8 HIGH 2026-05-05
CVE-2025-66437
CVSS 8.8 HIGH 2025-12-15FIX AVAILABLE
CVE-2025-66434
CVSS 8.8 HIGH 2025-12-15FIX AVAILABLE
CVE-2020-6145
CVSS 8.8 HIGH 2020-08-10FIX AVAILABLE
CVE-2018-3885
CVSS 8.8 HIGH 2018-09-12FIX AVAILABLE
CVE-2018-3884
CVSS 8.8 HIGH 2018-09-12FIX AVAILABLE
CVE-2018-3883
CVSS 8.8 HIGH 2018-09-12FIX AVAILABLE
CVE-2018-3882
CVSS 8.8 HIGH 2018-09-12FIX AVAILABLE
CVE-2026-39352
CVSS 8.7 HIGH 2026-05-20FIX AVAILABLE
CVE-2025-52042
CVSS 8.2 HIGH 2025-10-01FIX AVAILABLE
CVE-2025-52041
CVSS 8.2 HIGH 2025-10-01FIX AVAILABLE
CVE-2025-52040
CVSS 8.2 HIGH 2025-10-01FIX AVAILABLE
CVE-2025-52039
CVSS 8.2 HIGH 2025-10-01FIX AVAILABLE
CVE-2025-66436
CVSS 4.3 MEDIUM 2025-12-15
CVE-2025-28062 3 exploits
CVSS 8.1 HIGH 2025-05-05FIX AVAILABLE
CVE-2026-65822
CVSS 7.6 HIGH 2026-08-17FIX AVAILABLE
CVE-2025-52044
CVSS 7.5 HIGH 2025-09-16FIX AVAILABLE
CVE-2019-20521
CVSS 7.4 HIGH 2020-03-19FIX AVAILABLE
CVE-2019-20520
CVSS 7.4 HIGH 2020-03-19FIX AVAILABLE
CVE-2019-20519
CVSS 7.4 HIGH 2020-03-19FIX AVAILABLE
CVE-2019-20518
CVSS 7.4 HIGH 2020-03-19FIX AVAILABLE
CVE-2019-20517
CVSS 7.4 HIGH 2020-03-19
CVE-2019-20516
CVSS 7.4 HIGH 2020-03-19FIX AVAILABLE
CVE-2019-20515
CVSS 7.4 HIGH 2020-03-19
CVE-2019-20514
CVSS 7.4 HIGH 2020-03-19
CVE-2026-72910
CVSS 7.1 HIGH 2026-08-10FIX AVAILABLE
CVE-2026-72909
CVSS 7.1 HIGH 2026-08-10FIX AVAILABLE
CVE-2026-13227
CVSS 7.1 HIGH 2026-08-04FIX AVAILABLE
CVE-2026-72908
CVSS 6.5 MEDIUM 2026-08-10FIX AVAILABLE
CVE-2026-72907
CVSS 6.5 MEDIUM 2026-08-10FIX AVAILABLE
CVE-2026-44448
CVSS 6.5 MEDIUM 2026-05-13FIX AVAILABLE
CVE-2026-44445
CVSS 6.5 MEDIUM 2026-05-13FIX AVAILABLE
CVE-2026-44440
CVSS 6.5 MEDIUM 2026-05-13FIX AVAILABLE
CVE-2025-56381 1 exploit
CVSS 6.5 MEDIUM 2025-10-02FIX AVAILABLE
CVE-2025-52050
CVSS 6.5 MEDIUM 2025-09-30FIX AVAILABLE
CVE-2025-52049
CVSS 6.5 MEDIUM 2025-09-30FIX AVAILABLE
CVE-2025-52047
CVSS 6.5 MEDIUM 2025-09-30FIX AVAILABLE
CVE-2025-52043
CVSS 6.5 MEDIUM 2025-09-30FIX AVAILABLE