CVE-2026-123784

Fluxbox through 1.3.7 contains an OS command injection vulnerability in RootTheme::reconfigTheme that allows attackers to execute commands via crafted style background values. Attackers can embed shell metacharacters in background pixmap paths, random directories, or gradient texture text, which...

CVE-2026-123784

Fluxbox versions through 1.3.7 are susceptible to an OS command injection vulnerability within the RootTheme::reconfigTheme() function. The root cause is the unescaped concatenation of user-provided style background values—such as pixmap paths, random directories, or gradient texture text—into an...

EUVD-2026-118302

Fluxbox through 1.3.7 contains an OS command injection vulnerability in RootTheme::reconfigTheme that allows attackers to execute commands via crafted style background values. Attackers can embed shell metacharacters in background pixmap paths, random directories, or gradient texture text, which...

CVE-2026-123784: fluxbox: Fluxbox through 1.3.7 contains an OS command injection vulnerability in RootTheme::reconfigTheme() that allows…

Fluxbox through 1.3.7 contains an OS command injection vulnerability in RootTheme::reconfigTheme that allows attackers to execute commands via crafted style background values. Attackers can embed shell metacharacters in background pixmap paths, random directories, or gradient texture text, which...