{"uuid": "67810245-44d5-499d-91d9-bb98808a0ee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90937", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvi7rfmuht2f", "content": "CVE-2026-90937 - froxlor\nIn versions of Froxlor earlier than 2.2.5, the system does not check for hidden line\u2011break characters in the URLs used for subdomain redirects. This lets an authenticated customer paste\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#froxlor #CVE #infosec", "creation_timestamp": "2026-09-14T13:30:07.972130Z"}