CVEs published by Spanish National Cybersecurity Institute, S.A. (INCIBE)

CVEs published by Spanish National Cybersecurity Institute, S.A. (INCIBE) (CVE Numbering Authority). 2 tracked.

• CVE-2026-12895 HIGH 7.1 SQL injection in Frappe's ERPNext, versions ERPNext 15.107.0 and Frappe 15.107.2
• CVE-2026-18363 CRITICAL 9.1 A logic vulnerability in the password reset token validation routine implemented by osTicket in versions prior

← Back to latest CVEs