Security Advisory

CVE-2026-13227

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-04 20:53:53

Last updated 2026-08-05 14:44:49

Assigner Fluid Attacks

CVSS score not scored

State PUBLISHED

Description

An Improper Authorization vulnerability exists in ERPNext version <v16.25.0 and <15.115.0 due to insufficient access control in the whitelisted API method erpnext.crm.doctype.prospect.prospect.get_opportunities. This issue affects ERPNext: before 15.115.0, before 16.26.0.

← Browse all CVEs View on cve.org ↗