Approved changes feed: RSS · Atom

cpe:2.3:a:frappe:erpnext:16.0.0:rc1:*:*:*:*:*:*

part: a version: 16.0.0 update: rc1

VendorFrappe (a51f8b94-1fb6-5e30-97d7-fbeb544c71ba)
ProductErpnext (bd490dec-a7c0-525e-8fd2-591f39522182)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/frappe/erpnext purl2cpe 2026-06-01 10:17:00.630308
pkg:sourceforge/erpnext.mirror purl2cpe 2026-06-01 10:17:00.630310

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-27471 vulnerable 2026-06-08 07:53:22.353302 ERP: Document access through endpoints due to missing validation
ERP is a free and open source Enterprise Resource Planning tool. In versions up to 15.98.0 and 16.0.0-rc.1 and through 16.6.0, certain endpoints lacked access validation which allowed for unauthorized document access. This issue has been fixed in versions 15.98.1 and 16.6.1.
Published: 2026-02-21T06:38:11.220Z
Updated: 2026-02-24T18:53:57.291Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.