Froxlor Vulnerability Allows File Manipulation and Information Disclosure

CERT-Bund has released security advisory WID-SEC-2026-0834 concerning a critical vulnerability in Froxlor, a web-based server management software. The vulnerability, rated with a CVSS base score of 8.2 (high), enables remote attackers to manipulate files and disclose sensitive information. The advisory specifically affects Open Source Froxlor versions prior to 2.3.5, running on Linux and UNIX operating systems.

Affected entities, primarily technology companies and system administrators using Froxlor, are advised to mitigate the vulnerability. While the advisory indicates mitigation is available, specific actions are not detailed in this summary. Users should consult the provided links for detailed information on mitigation strategies and version updates to prevent unauthorized file manipulation and data breaches. The advisory was published on March 23, 2026, with the latest update on March 24, 2026.