Vulnerabilities
Summary — last 7 days
New vulnerabilities4,804▲ 1,790 vs. last week
Critical / high2,654▲ 1,132 vs. last week
New active exploitation (KEV)7▲ 3 vs. last week
Unscored (no CVSS)209▲ 39 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (6.9) | 0.38% | — | Frappe CloudAIFrappe ErpnextAI | 10/8/2026 | 10/8/2026 | A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext authentication process, which allows multiple email addresses to be accepted by manipulating the email field in the /api/method/press.api.account.signup endpoint. The vulnerability occurs when an unauthenticated remote… |