CVE-2026-13227
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Aug 04, 2026
Vendor
unknown
Description
An Improper Authorization vulnerability exists in ERPNext version <v16.25.0 and <15.115.0 due to insufficient access control in the whitelisted API method erpnext.crm.doctype.prospect.prospect.get_opportunities. This issue affects ERPNext: before 15.115.0, before 16.26.0.