Detections
Analytics
SCA: security update for froxlor/froxlor (GHSA-f9rx-7wf7-jr36)
high Tenable Cloud Security Plugin ID 442597
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- Froxlor is open source server administration software. Prior to 2.3.7, the API authentication path in
lib/Froxlor/Api/FroxlorRPC.php and FroxlorRPC::validateAuth accepts an API key and secret for an
administrator or customer account without checking type_2fa, validating a TOTP code, or invoking
FroxlorTwoFactorAuth. The web interface requires a second factor for accounts with two-factor
authentication enabled, but the API grants access after validating only the API credentials, expiration,
API permission, and account status. An attacker who obtains an API key and secret for a protected account
can call the available API functions without supplying the configured second factor, which can expose or
modify customer data, domains, email and FTP accounts, databases, DNS records, and certificate material.
This issue is fixed in version 2.3.7. (CVE-2026-52793)
Solution
Update the froxlor/froxlor library and its related packages to version 2.3.7 or later.See Also
Plugin Details
Severity: High
ID: 442597
Version: Revision 1.5
Type: Local
Family: SCA Checks
Published: 6/4/2026
Updated: 8/19/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.3
Percentile: 53.62
Vendor
Vendor Severity: High
CVSS v2
Risk Factor: High
Base Score: 8.5
Temporal Score: 6.3
Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:N
CVSS Score Source: CVE-2026-52793
CVSS v3
Risk Factor: High
Base Score: 8.1
Temporal Score: 7.1
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 6/3/2026
Vulnerability Publication Date: 6/3/2026
Reference Information
CVE: CVE-2026-52793
cwe: CWE-287