F
Vendor security profile
froxlor
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs24
Critical5
CISA KEV0
Public exploit12
Patch rate%21
Avg. CVSS7.7
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
6
18
0
CVE KEV
CVE severity distribution
24toplam CVE
Critical5 (21%)
High14 (58%)
Medium5 (21%)
Patch and exploitation view
%21
Verified patch
%0
CISA KEV
%50
Public exploit
5Patch available
0Partial
0Workaround
0Vendor: no patch
19Unknown
Latest vulnerabilities
9.3
CVE-2026-100720
Froxlor before 2.3.12 Stored XSS via SSL certificate issuer
F
Patch status unknownEPSS %0
7.1
CVE-2026-100719
Froxlor before 2.3.12 Credential Disclosure via DirProtections API
F
Patch status unknownEPSS %0
7.1
CVE-2026-100718
Froxlor before 2.3.12 Authentication Bypass via EmailSender.add
F
Patch status unknownEPSS %0
8.5
CVE-2026-100717
froxlor before 2.3.12 CRLF Injection via validateUrl userinfo
F
Patch status unknownEPSS %0
9.4
CVE-2026-100716
Froxlor before 2.3.12 Privilege Escalation via Symlink
F
Patch status unknownEPSS %0
8.5
CVE-2026-100715
Froxlor before 2.3.12 Arbitrary File Deletion via Symlink
F
Patch status unknownEPSS %0
9.4
CVE-2026-100714
Froxlor before 2.3.12 Command Injection via letsencryptchallengepath
F
Patch status unknownEPSS %1
7.1
CVE-2026-100713
Froxlor before 2.3.12 Privilege Escalation via SSH Key Sync
F
Patch status unknownEPSS %0
7.1
CVE-2026-100712
froxlor before 2.3.12 Two-Factor Authentication Bypass via CSRF
F
Patch status unknownEPSS %0
8.7
CVE-2026-100711
froxlor before 2.3.12 Authentication Bypass via Session Persistence
F
Patch status unknownEPSS %0