CVE ID :CVE-2026-121436 Published : Nov. 3, 2026, 2:28 p.m. | 35 minutes ago Description :Froxlor from 2.3.8 before 2.3.15 contains an information disclosure vulnerability that allows administrators with customers_see_all to view every account's API key and secret through an unscoped WHERE 1...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-121436 - Froxlor 2.3.8 before 2.3.15 API Key Disclosure via api_keys.php

VERWANDTEARTIKEL

CVE-2026-28336 - SolarWinds Dameware Command Injection Vulnerability

CVE-2026-28335 - SolarWinds Dameware Buffer Overflow Vulnerability

CVE-2026-28327 - SolarWinds Dameware DLL Hijacking Vulnerability

CVE-2026-103916 - Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory

CVE-2026-73328 - Volmarg Personal Management System through 2.1.0 Unrestricted File Upload RCE via /upload/send/

CVE-2026-121557 - WPPConnect Server through 2.10.74 Missing Authentication via /api/:session/chatwoot