Is CVE-2026-41231 actively exploited?

No active exploitation of CVE-2026-41231 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-41231 be exploited remotely?

Yes. CVE-2026-41231 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-41231?

CVE-2026-41231 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2026-41231

HIGH

CVE-2026-41231

CWE-59Published: April 23, 2026· Updated: Apr 27, 2026

7.5

CVSS v3.1

EPSS:0.05%probability of exploitation in 30 daysPercentile:14.5th

Official Description

Froxlor is open source server administration software. Prior to version 2.3.6, `DataDump.add()` constructs the export destination path from user-supplied input without passing the `$fixed_homedir` parameter to `FileDir::makeCorrectDir()`, bypassing the symlink validation that was added to all other customer-facing path operations (likely as the fix for CVE-2023-6069). When the ExportCron runs as root, it executes `chown -R` on the resolved symlink target, allowing a customer to take ownership of arbitrary directories on the system. Version 2.3.6 contains an updated fix.

NVD Source

Technical Analysis

CVE-2026-41231 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.5.