Question 1

What is CVE-2026-39352 — CVE-2026-39352?

Accepted Answer

Frappe is a full-stack web application framework. Versions prior to 15.105.0 and 16.15.0 contain a possible Arbitrary File Read vulnerability via Path Traversal. The issue is resolved in versions 16.15.0, 15.105.0 and above.

Question 2

What is the authoritative source for CVE-2026-39352?

Accepted Answer

CVE-2026-39352 (CVE-2026-39352) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-39352CVE-2026-39352

Description

Scoring