https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 00:25:47 +0000 https://vulnerability.circl.lu/vuln/cve-2026-90936 <p><strong>Affected:</strong> froxlor</p> <p>Froxlor before 2.3.7 fails to properly scope sender alias lookups to the current customer in customer_email.php. Authenticated attackers can enumerate global sender alias IDs and read other customers&#39; allowed sender values by supplying arbitrary senderid parameters in delete confirmation requests.</p> <p><strong>Affected:</strong> froxlor</p> <p>Froxlor before 2.3.7 fails to properly scope sender alias lookups to the current customer in customer_email.php. Authenticated attackers can enumerate global sender alias IDs and read other customers&#39; allowed sender values by supplying arbitrary senderid parameters in delete confirmation requests.</p> https://vulnerability.circl.lu/vuln/cve-2026-90936