Frappe Technologies

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Frappe Technologies records in CISA KEV

No Frappe Technologies vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-69372 CVE-2026-4894

Frappe Cloud signup flaw lets attackers receive other users' OTP codes

LOW 37

A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext authentication process, which allows multiple email addresses to be accepted by manipulating the email field in the /api/m…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00379 Published 2026-10-08 No fix listed CWE-290

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0