Question 1

What is CVE-2026-39385 — CVE-2026-39385?

Accepted Answer

Frappe LMS is an open source learning management system. In version 2.51.0 and earlier, a user could bypass payment validation for courses by using unrelated batch. This has been patched in 2.52.0 with enrollment now validating that the batch is linked to course.

Question 2

What is the authoritative source for CVE-2026-39385?

Accepted Answer

CVE-2026-39385 (CVE-2026-39385) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-39385CVE-2026-39385

Description

Scoring