What’s Vulnerable › Products

frappe crm vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your frappe crm version is affected

Latest frappe crm vulnerabilities

• CVE-2026-116492 — Frappe CRM before 1.89.1 Missing Authorization via Phone Lookup API (CVSS 6.5)
• CVE-2026-111938 — Frappe CRM before 1.74.0 Missing Authorization via add_note_to_call_log (CVSS 4.3)
• CVE-2026-111937 — Frappe CRM before 1.81.2 Missing Authorization on CRM Notification Records (CVSS 5.4)
• CVE-2026-108734 — Frappe CRM 1.49.0 through 1.87.0 Missing Authorization via get_linked_docs_of_document (CVSS 4.3)
• CVE-2026-53761 — Frappe CRM: Authentication Bypass via Logged Invitation Keys in crm/api (CVSS 8.2)
• CVE-2025-68928 — Frappe CRM vulnerable to authenticated XSS via website field (CVSS 5.4)
• CVE-2025-11461 — Frappe CRM 1.53.1 — Multiple SQL Injections in Dashboard Controller (CVSS 8.8)