CVE-2026-109962

Froxlor versions 0.10.0 before 2.3.14 are vulnerable to a missing authorization flaw in the MysqlServer and Cronjobs APIs. This vulnerability allows reseller accounts to bypass intended restrictions and read administrative-only configurations by calling MysqlServer.listing, MysqlServer.get, or Cr...