CVE-2026-114664

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 22, 2026

Last Seen

October 22, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

High-Risk SQL Injection Vulnerability in Frappe Framework Disclosed63.0

A blind SQL injection vulnerability, CVE-2026-114664, has been identified in the Frappe Framework prior to version 16.33.0. This vulnerability affects authenticated users who can exploit the frappe.desk.doctype.event.event.get_events method to extract sensitive data from the database. The risk is de...