CVE-2026-109963
Froxlor before 2.3.14 IDOR in Email Template Editor via admin_templates.php
CVSS score
5.3
EPSS probability
—
Risk score
0.5
Published
7 h ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.7
CVE-2026-109960
Froxlor 2.0.0 before 2.3.14 Stored XSS via Customer Theme Value
F
Patch status unknown
8.4
CVE-2026-109961
Froxlor 0.10.0 before 2.3.14 Newline Injection via Ftps.add additional_members
F
Patch status unknown
5.3
CVE-2026-109962
Froxlor 0.10.0 before 2.3.14 Missing Authorization in MysqlServer and Cronjobs API
F
Patch status unknown
9.0
CVE-2026-62988
Froxlor: Credential and 2FA secret disclosure via Froxlor API endpoints
F
Patch verifiedEPSS %1
9.4
CVE-2026-100714
Froxlor before 2.3.12 Command Injection via letsencryptchallengepath
F
Patch status unknownEPSS %1
7.2
CVE-2026-54348
Froxlor: Second-Order SQL Injection via `Admins.add` `ipaddress` Parameter Allows Full Database Exfiltration
F
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-109963"