CVE-2026-121435

Froxlor versions before 2.3.15 are affected by an authorization bypass vulnerability in the Mysqls.add API endpoint. The root cause is a missing customer_hide_options check, which allows authenticated customers to create MySQL databases even if the administrator has globally disabled the MySQL fe...