CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-113678 — Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::...

·Source: NIST NVD

Updated:

Executive Summary

Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::makeChownWithNewStats that allows authenticated customers to take ownership of arbitrary host directories by abusing the root-run traffic cron. Attackers can replace the goaccess statistics directory in their document root with a symlink, causing chown -R to hand root-owned trees to them and enabling root escalation.

Analysis

Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::makeChownWithNewStats that allows authenticated customers to take ownership of arbitrary host directories by abusing the root-run traffic cron. Attackers can replace the goaccess statistics directory in their document root with a symlink, causing chown -R to hand root-owned trees to them and enabling root escalation. CVSS Score: 9.9. Published: 2026-10-20T16:17:12.613.

Indicators of Compromise (1)

CVE (1)
CVE-2026-113678
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 20, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

CVE-2026-109618 and CVE-2026-109619 Are Two Directions Through the Same Pre-RINIT Window

[object Object]

CVE-2026-109618CVE-2026-109619
r/netsec
LOWVulnerability

Fintechs top banks and stablecoins for cheap cross-border payment - BIS research

Cross-border payments remain slow and expensive but fintech outfits such as Wise and Remitly have substantially cut costs relative to traditional retail bank wires while stabelcoins still suffer from issues with friction, according to BIS research.

Finextra
MEDIUMVulnerability

More and More Cyber Jobs Require AI Expertise

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/more-more-cyber-jobs-require-ai-expertise-image_small-2-a-33170.jpg" align=right hspace=4><b>But There's No Consensus Way to Assess Levels of Skill</b><br>A growing number of cybersecurity jobs require not just a baseline familiarity with AI tools, but significant AI expertise, according to an analysis of validated job vacancies i

Bank Info Security