CVE-2026-100719 - Froxlor before 2.3.12 Credential Disclosure via DirProtections API
Brief
CVE ID : CVE-2026-100719
Published : Sept. 26, 2026, 2:16 p. m.
- 6 hours, 44 minutes ago
Description : Froxlor versions before 2.
- 12 contain a credential disclosure vulnerability in the DirProtections. listing API command that returns htpasswd password hashes. Authenticated API users can retrieve bcrypt password hashes for protected-directory users, enabling offline cracking attempts and exposure of reused credentials.
Severity: 7.1
- HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...