NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-39352
Summary

Frappe is a full-stack web application framework. Versions prior to 15.105.0 and 16.15.0 contain a possible Arbitrary File Read vulnerability via Path Traversal. The issue is resolved in versions 16.15.0, 15.105.0 and above.

Publication Date May 21, 2026, 5:16 a.m.
Registration Date May 22, 2026, 4:07 a.m.
Last Update May 22, 2026, 12:24 a.m.
Related information, measures and tools
Common Vulnerabilities List