Product by Froxlor

Froxlor/froxlor

60 known vulnerabilities in Froxlor/froxlor (Froxlor), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Froxlor/froxlor (Froxlor)

Critical	CVE-2023-2034	Unrestricted Upload of File with Dangerous Type in froxlor/froxlor also in 1 other product	9.1	14.04.2023
Critical	CVE-2021-42325	Froxlor: SQL Injection also in 1 other product	9.8	12.10.2021
High	CVE-2023-0315	Command Injection in froxlor/froxlor also in 1 other product	7.2	16.01.2023
Critical	CVE-2023-0877	Code Injection in froxlor/froxlor also in 1 other product	9.1	17.02.2023
Critical	CVE-2016-5100	Froxlor: security vulnerability also in 1 other product	9.8	13.02.2017
High	CVE-2018-1000527	Froxlor: Information Disclosure also in 1 other product	7.2	26.06.2018
High	CVE-2020-10235	Froxlor: security vulnerability also in 1 other product	8.8	09.03.2020
Critical	CVE-2026-26279	Froxlor Admin-to-Root Privilege Escalation via Input Validation Bypass + OS Command Injection also in 1 other product	9.1	03.03.2026
Critical	CVE-2026-62988	Froxlor: Credential and 2FA secret disclosure via Froxlor API endpoints also in 1 other product	9.0	18.08.2026
Critical	CVE-2023-3173	Improper Restriction of Excessive Authentication Attempts in froxlor/froxlor also in 2 other products	9.8	09.06.2023
Critical	CVE-2023-0671	Code Injection in froxlor/froxlor also in 1 other product	9.9	04.02.2023
Critical	CVE-2023-1307	Authentication Bypass by Primary Weakness in froxlor/froxlor also in 1 other product	9.8	10.03.2023
Critical	CVE-2024-34070	Froxlor Vulnerable to Blind XSS Leading to Froxlor Application Compromise also in 1 other product	9.7	10.05.2024
Critical	CVE-2026-41228	Froxlor: PHP Remote File Inclusion also in 1 other product	10.0	23.04.2026
High	CVE-2026-54348	Froxlor: SQL Injection also in 2 other products	7.2	18.08.2026
Critical	CVE-2023-3668	Improper Encoding or Escaping of Output in froxlor/froxlor also in 1 other product	9.1	14.07.2023
Critical	CVE-2023-6069	Improper Link Resolution Before File Access in froxlor/froxlor also in 1 other product	9.9	10.11.2023
High	CVE-2018-12642	Froxlor: Improper Access Control also in 1 other product	7.5	22.06.2018
High	CVE-2026-54347	Froxlor: Stored XSS in DNS TXT Record Content Allows Customer-to-Admin Account Takeover also in 2 other products	8.7	18.08.2026
High	CVE-2026-30932	Froxlor: Injection also in 1 other product	8.8	24.03.2026
Medium	CVE-2022-3869	Code Injection in froxlor/froxlor also in 1 other product	6.5	05.11.2022
Critical	CVE-2026-41229	Froxlor: Code Injection also in 1 other product	9.1	23.04.2026
Medium	CVE-2020-29653	Froxlor: security vulnerability also in 1 other product	6.1	13.04.2022
High	CVE-2023-3172	Path Traversal in froxlor/froxlor also in 1 other product	6.5	09.06.2023
High	CVE-2026-41236	Froxlor has privilege escalation in SSH key synchronization via symlinked `authorized_keys` path also in 2 other products	8.8	04.06.2026

All vulnerabilities in search

News

@RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 33sans-atrisk-mail, 27.08.2026
SSA-264814 V1.0: Timing Based Side Channel Vulnerability in the OpenSSL RSA Decryption in SIMATIC Productssiemens-productcert

All products by Froxlor

Key figures

Vulnerabilities

News