CVE-2026-44207

CVE

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

June 13, 2026

Last Seen

June 13, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

IDOR Vulnerability in Frappe Framework Exposes User Email Configurations57.1

CVE-2026-44207 is an IDOR vulnerability in the Frappe web application framework, affecting versions prior to 15.107.0 and 16.17.0. Authenticated users could exploit this flaw to access other users' email configuration details. The vulnerability has been assigned a CVSS base score of 6.9, indicating...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

IDOR Vulnerability in Frappe Framework Exposes User Email Configurations

Jun 13·3 sources

Related Articles (3)

CVE-2026-44207 National Vulnerability Database / 1d Frappe is a full-stack web application framework. Prior to versions 15.107.0 and 16.17.0, an IDOR vulnerability allows authenticated users to access other users' email configuration details. This issue has been patched in versions 15.107.0 and 16.17.0.

nvd.nist.gov·Jun 13

CVE-2026-44207 CVE Vulnerability Disclosures / 1d Frappe is a full-stack web application framework. Prior to versions 15.107.0 and 16.17.0, an IDOR vulnerability allows authenticated users to access other users' email configuration details. This issue has been patched in versions 15.107.0 and 16.17.0.

cve.report·Jun 13

CVE-2026-44207 - Exploits & Severity

Related Entities

Data Breach CWE-639 - Authorization Bypass Through User-Controlled Key (IDOR)CWE-862 - Missing Authorization Frappe Authorization Bypass Through User-Controlled Key