Omisión de autenticación en múltiples productos de Frappe Technologies

Authentication bypass in multiple products from Frappe Technologies Thu, 10/08/2026 - 11:26 Aviso Affected Resources Frappe Cloud; ERPNext registration service. Description INCIBE has coordinated the publication of a medium severity vulnerability affecting several products by Frappe Technologies, enterprise resource planning software and a cloud platform for managing and monitoring multiple Frappe deployments. The vulnerability was discovered by Miguel Jiménez Cámara. This vulnerability has…

Číst originál na INCIBE-CERT →

CZ · EN/orig

Frappe Technologies ES

tg: zranitelnost tp: identita

CVE v události 1

CVE	hodnocení	KEV	EPSS
CVE-2026-4894	6.9 4.0 · INCIBE	–	0.00

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 6.9.