Helpdesk (Frappe) - vulnerabilities (CVEs)

1 CVEs, 1 in the last 30 days, 2 known versions, newest CVE from 2026-10-19. Vendor: Frappe.

CVEs of Helpdesk

• CVE-2026-111939 - CVSS 5.1 (medium), 2026-10-19: Frappe Helpdesk before 1.26.0 contains an authorization bypass vulnerability that allows authenticated portal users to create tickets impersonating other…
• CVE-2025-10655 - CVSS 8.8 (high), 2025-12-09: SQL Injection in Frappe HelpDesk in the dashboard get_dashboard_data due to unsafe concatenation of user-controlled parameters into dynamic SQL…