CVE-2026-100711 in Froxlorinformación

Resumen

por MITRE • 2026-09-26

froxlor versions before 2.3.12 fail to invalidate existing panel sessions, API keys, and 2FA trust cookies when a user password is changed. Attackers holding hijacked sessions, valid API keys, or 2FA trust tokens retain full account access after password rotation, bypassing incident response actions.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

VulnCheck

Reservar

2026-09-26

Divulgación

2026-09-26

Moderación

aceptado

Artículo

VDB-410722

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-100711
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-100711
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-100711/

◂ AnteriorVisión De ConjuntoPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!