Frappe crm

• CVE-2026-116492 Medium 6.5 Frappe CRM before 1.89.1 Missing Authorization via Phone Lookup API 0.2%
• CVE-2026-111938 Medium 4.3 Frappe CRM before 1.74.0 Missing Authorization via add_note_to_call_log 0.3%
• CVE-2026-111937 Medium 5.4 Frappe CRM before 1.81.2 Missing Authorization on CRM Notification Records 0.2%
• CVE-2026-108734 Medium 4.3 Frappe CRM 1.49.0 through 1.87.0 Missing Authorization via get_linked_docs_of_document 0.3%
• CVE-2026-53761 High 8.2 Frappe CRM: Authentication Bypass via Logged Invitation Keys in crm/api 0.6%
• CVE-2025-68928 Medium 5.4 Frappe CRM vulnerable to authenticated XSS via website field 0.2%