Open Source Froxlor

Name: Open Source Froxlor
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical3high3medium0low

updated 2026-10-28

vulnerabilities (25)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-3173US	critical9.8	1.13% (66th)	—	2.3.7	2023-06-09	< 2.3.7
CVE-2026-26279US	—	0.85% (58th)	—	2.3.4	2026-03-03	< 2.3.4
CVE-2026-54348US	—	0.66% (51st)	—	2.3.8	2026-08-18	< 2.3.8
CVE-2026-113678US	critical9.9	0.63% (50th)	—	2.3.15	2026-10-20	< 2.3.15
CVE-2026-30932US	high8.8	0.56% (47th)	—	2.3.5	2026-03-24	< 2.3.5
CVE-2026-41228US	—	0.52% (44th)	—	2.3.6	2026-04-23	< 2.3.6
CVE-2026-41229US	—	0.48% (41st)	—	2.3.6	2026-04-23	< 2.3.6
CVE-2026-113677US	medium5.4OT elevated	0.45% (39th)	—	2.3.15	2026-10-20	< 2.3.15
CVE-2026-54543US	—	0.45% (39th)	—	2.3.8	2026-08-18	< 2.3.8
CVE-2026-54347US	—	0.42% (36th)	—	2.3.8	2026-08-18	< 2.3.8
CVE-2026-41231US	—	0.41% (35th)	—	2.3.6	2026-04-23	< 2.3.6
CVE-2026-113676US	—OT elevated	0.39% (33rd)	—	2.3.15	2026-10-20	< 2.3.15
CVE-2026-41236US	—	0.37% (30th)	—	2.3.7	2026-06-04	< 2.3.7
CVE-2026-41230US	—	0.35% (28th)	—	2.3.6	2026-04-23	< 2.3.6
CVE-2020-36978US	—	0.34% (27th)	—	no fix	2026-01-27	≤ Server Management Panel <0.10.17
CVE-2026-109960US	high7.7	0.29% (22nd)	—	2.3.14	2026-10-13	< 2.3.14
CVE-2026-41234US	—	0.27% (19th)	—	2.3.7	2026-06-04	< 2.3.7
CVE-2026-41237US	—	0.27% (19th)	—	2.3.7	2026-06-04	< 2.3.7
CVE-2026-41233US	—OT elevated	0.26% (18th)	—	2.3.6	2026-04-23	< 2.3.6
CVE-2026-109963US	medium4.3	0.26% (17th)	—	2.3.14	2026-10-13	< 2.3.14
CVE-2026-109962US	medium4.3	0.26% (17th)	—	2.3.14	2026-10-13	< 2.3.14
CVE-2026-55593US	—	0.26% (17th)	—	2.3.8	2026-08-18	< 2.3.8
CVE-2026-41232US	—OT elevated	0.23% (14th)	—	2.3.6	2026-04-23	< 2.3.6
CVE-2026-41235US	—OT elevated	0.23% (13th)	—	2.3.7	2026-06-04	< 2.3.7
CVE-2026-109961US	high8.5	0.22% (13th)	—	2.3.14	2026-10-13	< 2.3.14

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')5 CVEs
CWE-863Incorrect Authorization4 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-285Improper Authorization1 CVEs
CWE-307Improper Restriction of Excessive Authentication Attempts1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)25 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan