{"vulnerability": "CVE-2026-100714", "sightings": [{"uuid": "f316eab5-60ef-4518-bd2c-7658ec702dd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100714", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwgo65qchp2r", "content": "\ud83d\udea8 CVE-2026-100714 \u2014 CVSS 9.4 CRITICAL\n\nFroxlor before 2.3.12 does not restrict or escape the system.letsencryptchallengepath setting: unlike sibli...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100714\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T16:07:40.376740Z"}, {"uuid": "be58e7dc-c786-4f7f-896e-7ed7ba6991c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100714", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhbcipmhw2r", "content": "CVE-2026-100714 - froxlor\nFroxlor versions prior to 2.3.12 let a user who can change settings add malicious text to the LetsEncrypt challenge path. That text is passed directly to a script run as the system's root\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#froxlor #CVE #infosec", "creation_timestamp": "2026-09-26T21:50:07.980822Z"}, {"uuid": "54649afb-aa3c-410c-a105-138741b20183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100714", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhipuda3s27", "content": "\ud83d\udd34 CVE-2026-100714 - Critical (9.1)\n\nFroxlor before 2.3.12 does not restrict or escape the system.letsencryptchallengepath setting: un...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100714/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T00:02:53.261620Z"}]}