https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T21:10:49.378631+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-41237 CVE-2026-41237 — Froxlor has an incomplete fix for CVE-2026-30932 2026-10-07T21:10:49.394869+00:00

Affected: froxlor

Froxlor is open source server administration software. In version 2.3.6 and earlier, the LOC record regex uses `\s+` which matches newlines (allowing embedded newlines to pass), TLSA `matchingType=0` has no upper bound on hex data length, and all validators return raw input without zone-file escaping. Version 2.3.7 contains an updated patch.