Question 1

What is CVE-2026-55852 — CVE-2026-55852?

Accepted Answer

Frappe is a full-stack web application framework. Prior to 16.23.0 and 15.112.0, TarSlip RCE was possible in Package Import because tarfile members were not sufficiently checked before extraction. This issue is fixed in versions 16.23.0 and 15.112.0.

Question 2

What is the authoritative source for CVE-2026-55852?

Accepted Answer

CVE-2026-55852 (CVE-2026-55852) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-55852CVE-2026-55852

Description

Scoring