Vulnerabilities
Summary — last 7 days
New vulnerabilities4,793▲ 1,786 vs. last week
Critical / high2,645▲ 1,122 vs. last week
New active exploitation (KEV)7▲ 3 vs. last week
Unscored (no CVSS)208▲ 38 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Received | Medium (5.3) | 0.17% | — | Frappe SuiteAI | 10/12/2026 | 10/12/2026 | Frappe Suite before commit 2697564a9c46da6acc614743eaf9915fe5238f4f contains a broken access control vulnerability in the get_mailboxes and get_quota APIs that allows authenticated mail users to access other users' data. Attackers can supply another user's JMAP account ID to read mailbox names, message counts,… |