Frappe is a technology platform tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed June 13, 2026; most recent activity June 13, 2026.
CVE-2026-44207 is an IDOR vulnerability in the Frappe web application framework, affecting versions prior to 15.107.0 and 16.17.0. Authenticated users could exploit this flaw to access other users' email configuration…