Q: What is the authoritative source for CVE-2026-13227?

CVE-2026-13227 (CVE-2026-13227) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

Question 1

What is CVE-2026-13227 — CVE-2026-13227?

Accepted Answer

An Improper Authorization vulnerability exists in ERPNext version <v16.25.0 and <15.115.0 due to insufficient access control in the whitelisted API method erpnext.crm.doctype.prospect.prospect.get_opportunities. This issue affects ERPNext: before 15.115.0, before 16.26.0.

Question 2

What is the authoritative source for CVE-2026-13227?

Accepted Answer

CVE-2026-13227 (CVE-2026-13227) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

EPSS	0.43% probability of exploitation · percentile 34.9% · 2026-10-06T12:00:23Z
Last modified	2026-08-28

CVE-2026-13227CVE-2026-13227

Description

Scoring