CVE-2026-41233
Froxlor is open source server administration software.
Published Apr 23, 2026 · updated Jun 17, 2026 · froxlor froxlor
Froxlor is open source server administration software. Prior to version 2.3.6, in , the parameter is accepted from user input and used without validation when the calling reseller does not have the permission. This allows a reseller to attribute newly created domains to any other admin, bypassing their own domain quota (since the wrong admin's counter is incremented) and potentially exhausting another admin's quota. Version 2.3.6 fixes the issue.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Apr 23, 2026 · NIST NVD
Detected
Froxlor is open source server administration software. Prior to version 2.3.6, in , the parameter is accepted from user input and used without validation when the calling reseller does not have the permission. This allows a reseller to attribute newly created domains to any other admin, bypassing their own domain quota (since the wrong admin's counter is incremented) and potentially exhausting ano
Jun 17, 2026 · NIST NVD
Updated
Froxlor is open source server administration software. Prior to version 2.3.6, in , the parameter is accepted from user input and used without validation when the calling reseller does not have the permission. This allows a reseller to attribute newly created domains to any other admin, bypassing their own domain quota (since the wrong admin's counter is incremented) and potentially exhausting ano
Affected
- cpe froxlor/froxlorversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-41233
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-41233
Froxlor is open source server administration software. Prior to version 2.3.6, in , the parameter is accepted from user input and used without validation when the calling reseller does not have the permission. This allows a reseller to
nvd.nist.gov