https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:03:07.034151+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-377724 EUVD-2026-377724 2026-10-02T12:03:07.089396+00:00 EUVD-2026-377724 https://cve.radiocsirt.org/vuln/fkie_cve-2026-100711 fkie_cve-2026-100711 2026-10-02T12:03:07.089430+00:00

froxlor versions before 2.3.12 fail to invalidate existing panel sessions, API keys, and 2FA trust cookies when a user password is changed. Attackers holding hijacked sessions, valid API keys, or 2FA trust tokens retain full account access after password rotation, bypassing incident response actions.

 https://cve.radiocsirt.org/vuln/ghsa-xf4r-hwm6-xhx6 GHSA-xf4r-hwm6-xhx6 2026-10-02T12:03:07.089461+00:00

froxlor versions before 2.3.12 fail to invalidate existing panel sessions, API keys, and 2FA trust cookies when a user password is changed. Attackers holding hijacked sessions, valid API keys, or 2FA trust tokens retain full account access after password rotation, bypassing incident response actions.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3200 WID-SEC-W-2026-3200 — Froxlor: Mehrere Schwachstellen 2026-10-02T12:03:07.089478+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Froxlor ausnutzen, um Administratorrechte zu erlangen, um Daten zu manipulieren oder offenzulegen, sowie um Sicherheitsmechanismen zu umgehen.