CVE-2026-41229
Apr 23, 2026
Froxlor is open source server administration software. Prior to version 2.3.6, `PhpHelper::parseArrayToString()` writes string values into single-quoted PHP string literals without escaping single quo...
Read Advisory
Froxlor Froxlor Vulnerabilities
3 advisories affecting Froxlor Froxlor
3
Total CVEs
3
Critical
0
High
CVE-2026-41228
Apr 23, 2026
Froxlor is open source server administration software. Prior to version 2.3.6, the Froxlor API endpoint `Customers.update` (and `Admins.update`) does not validate the `def_language` parameter against ...
Read Advisory
CVE-2026-26279
Mar 3, 2026
Froxlor is open source server administration software. Prior to 2.3.4, a typo in Froxlor's input validation code (== instead of =) completely disables email format checking for all settings fields dec...
Read Advisory