DeutschShown in its original language — a full translation is planned for a future version.
Froxlor: Mehrere Schwachstellen
view advisory published 2026-05-28
Ein Angreifer kann mehrere Schwachstellen in Froxlor ausnutzen, um seine Privilegien zu erhöhen, um Informationen offenzulegen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-41237US | — | — | ||
Froxlor is open source server administration software. In version 2.3.6 and earlier, the LOC record regex uses `\s+` which matches newlines (allowing embedded newlines to pass), TL… | ||||
| CVE-2026-41236US | — | — | ||
Froxlor is open source server administration software. Version 2.3.6 contains a symlink-following flaw in the root-owned SSH key synchronization path used for customer FTP users. T… | ||||
| CVE-2026-41235US | —OT elevated | — | ||
Froxlor is open source server administration software. Version 2.3.6 lets administrators configure `system.available_shells` as the approved shell list that customers may assign to… | ||||
| CVE-2023-3173US | critical9.8 | — | ||
Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20. | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-f9rx-7wf7-jr36 vom 2026-05-28 mit PoCexternal
- GitHub Security Advisory GHSA-gcv3-5v9q-fmhh vom 2026-05-28 mit PoCexternal
- GitHub Security Advisory GHSA-j6fm-9rfm-j5hx vom 2026-05-28 mit PoCexternal
- GitHub Security Advisory GHSA-mq5v-pxpm-8jw2 vom 2026-05-28 mit PoCexternal
- GitHub Security Advisory GHSA-mr9h-45p9-fg8h vom 2026-05-28 mit PoCexternal
- GitHub Security Advisory GHSA-q4rm-m6xh-5pv7 vom 2026-05-28 mit PoCexternal
- WID-SEC-W-2026-1737 - CSAF Versionself
- WID-SEC-2026-1737 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan