What is CVE-2026-55593?
CVE-2026-55593 affects Froxlor server management software before version 2.3.8. The `lib/ajax.php` endpoint bypasses centralized validation in `lib/init.php`, allowing state-changing requests with only a session check, leading to potential unauthorized actions. Immediate upgrade to version 2.3.8 is recommended.
Azərbaycanca: CVE-2026-55593 Froxlor server idarəetmə proqramında müəyyən edilib. 2.3.8 versiyasından əvvəlki versiyalarda `lib/ajax.php` giriş nöqtəsi mərkəzləşdirilmiş sorğu yoxlamasını (`lib/init.php`) keçərək yalnız aktiv sessiyanı yoxlayır, bu da icazəsiz istifadəçiyə `editap` kimi critical sorğular göndərməyə imkan verir. Təcili olaraq 2.3.8 versiyasına yenilənmə tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-284
FAQ2
Which versions of Froxlor are affected by CVE-2026-55593?
This vulnerability affects all versions of Froxlor prior to version 2.3.8.
What critical operation can be performed by exploiting CVE-2026-55593?
An attacker can send requests like `editap` to perform unauthorized operations.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.