CVE-2026-38431

CRITICAL · CVSS 9.8 EPSS 0.06%

Source: NVD + CISA KEV + EPSS · Published: 2026-05-05 · Last synced: 2026-06-04

CyberRota Analysis

Detaylı analiz gerekiyor.

CVE

CVE-2026-38431

Severity

CRITICAL

CVSS

9.8

EPSS

0.06%

Original NVD Description

ERPNext v15.103.1 and before is vulnerable to Server-Side Template Injection (SSTI). An attacker with permission to create or edit email templates can inject template expressions that are executed on the server when the template is rendered.