CVE-2026-121436

Froxlor versions 2.3.8 through 2.3.14 are vulnerable to an information disclosure flaw in api_keys.php . This issue stems from an unscoped WHERE 1 query , which allows administrators possessing the customers_see_all privilege to view the API keys and secrets of every account. A significant securi...