CVE-2026-119145

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 29, 2026

Last Seen

October 29, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability in Frappe File Upload Handling69.2

A critical vulnerability (CVE-2026-119145) has been identified in Frappe's file upload handling, allowing authenticated attackers with low privileges to exploit a path traversal flaw that can lead to remote code execution. The vulnerability affects Frappe installations in the 15.x line prior to vers...