Vulnerability Bulletins |
CVE-2026-109962 |
|
| Affected software | MYSQL |
| Froxlor 0.10.0 before 2.3.14 contains a missing authorization vulnerability that allows reseller accounts to read full-admin-only MySQL server and cronjob configuration via API read commands. Resellers can call MysqlServer.listing, MysqlServer.get, or Cronjobs.listing through api.php to obtain management usernames, hosts, ports, TLS settings, and cron metadata. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-109962 | |