{"id":"CVE-2026-55823","title":"Frappe is a full-stack web application framework","summary":"Frappe is a full-stack web application framework. Prior to 16.23.0, the get_count() method in reportview composes a count operation around generated SQL through a raw database execution path, allowing crafted report input to alter SQL ex…","severity":"high","cwe":["CWE-89"],"published":"2026-10-13","updated":"2026-10-13","sourceUpdated":"2026-10-13T18:17:24.473","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-55823","references":[{"url":"https://github.com/frappe/frappe/commit/49dbde7460fa41528154088d23b6c6e12f733f9b","label":"security-advisories@github.com"},{"url":"https://github.com/frappe/frappe/commit/f4f2df926e3c2db2da5fc79983f285397c028690","label":"security-advisories@github.com"},{"url":"https://github.com/frappe/frappe/pull/40022","label":"security-advisories@github.com"},{"url":"https://github.com/frappe/frappe/pull/40027","label":"security-advisories@github.com"},{"url":"https://github.com/frappe/frappe/releases/tag/v16.23.0","label":"security-advisories@github.com"},{"url":"https://github.com/frappe/frappe/security/advisories/GHSA-mf6r-q34j-pjw7","label":"security-advisories@github.com"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-10-13T17:38:53.196Z","vendor":"frappe","product":"frappe","affected":["frappe < 16.23.0"],"cvss":8.7,"cvssVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-13T17:51:48.752488Z"},"cvssSource":"cna","epss":0.00365,"epssPercentile":0.30186,"slug":"CVE-2026-55823","body":"## Overview\n\nFrappe is a full-stack web application framework. Prior to 16.23.0, the get_count() method in reportview composes a count operation around generated SQL through a raw database execution path, allowing crafted report input to alter SQL executed by the application. This issue is fixed in version 16.23.0.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":47.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":221040,"id":"CVE-2026-55823","ts":1792027020204,"field":"cvss","old":null,"new":"8.7"},{"seq":221039,"id":"CVE-2026-55823","ts":1792027020204,"field":"severity","old":"none","new":"high"}]}