CVE-2026-109961

Froxlor versions 0.10.0 before 2.3.14 are vulnerable to a newline injection flaw in the Ftps.add API's additional_members parameter. This vulnerability allows authenticated customers to inject arbitrary entries into the root-owned NSS group database. Because the REBUILD_NSSUSERS cron job writes t...