Question 1

What is CVE-2026-48127 — CVE-2026-48127?

Accepted Answer

Frappe is a full-stack web application framework. Prior to 16.20.0 and 15.110.0, users without write access could attach files to any doctype through file-handling API endpoints such as add_attachments. This issue is fixed in versions 16.20.0 and 15.110.0.

Question 2

What is the authoritative source for CVE-2026-48127?

Accepted Answer

CVE-2026-48127 (CVE-2026-48127) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-48127CVE-2026-48127

Description

Scoring