{"vulnerability": "CVE-2026-90937", "sightings": [{"uuid": "67810245-44d5-499d-91d9-bb98808a0ee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90937", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvi7rfmuht2f", "content": "CVE-2026-90937 - froxlor\nIn versions of Froxlor earlier than 2.2.5, the system does not check for hidden line\u2011break characters in the URLs used for subdomain redirects. This lets an authenticated customer paste\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#froxlor #CVE #infosec", "creation_timestamp": "2026-09-14T13:30:07.972130Z"}, {"uuid": "d78108bd-08b7-42ed-9c59-61d08e752248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90937", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvibukmgim2b", "content": "\ud83d\udea8 CVE-2026-90937 \u2014 CVSS 9.4 CRITICAL\n\nfroxlor versions before 2.2.5 fail to validate newline characters in subdomain redirect URLs, allowing auth...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-90937\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T14:07:41.389039Z"}]}