CVE-2026-30932— Froxlor is vulnerable to BIND zone file injection via unsanitized DNS record content in DomainZones API
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-30932
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Froxlor is vulnerable to BIND zone file injection via unsanitized DNS record content in DomainZones API
Source: CVE Program / CVE List V5
Vulnerability Description
Froxlor is open source server administration software. Prior to version 2.3.5, the DomainZones.add API endpoint (accessible to customers with DNS enabled) does not validate the content field for several DNS record types (LOC, RP, SSHFP, TLSA). An attacker can inject newlines and BIND zone file directives (e.g. $INCLUDE) into the zone file that gets written to disk when the DNS rebuild cron job runs. This issue has been patched in version 2.3.5.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
输出中的特殊元素转义处理不恰当(注入)
Source: CVE Program / CVE List V5
Vulnerability Title
Froxlor 注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Froxlor是Froxlor团队的一套轻量级服务器管理软件。 Froxlor 2.3.5之前版本存在注入漏洞，该漏洞源于DomainZones.add API端点未验证DNS记录内容字段，可能导致注入新行和BIND区域文件指令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-30932
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-30932
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-30932 (1)
Vendor Advisories for CVE-2026-30932 (1)
Vendor Pages for CVE-2026-30932 (1)
IV. Related Vulnerabilities
Same product: froxlor
- CVE-2026-41237
Froxlor has an incomplete fix for CVE-2026-30932 - CVE-2026-41236
Froxlor has privilege escalation in SSH key synchronization - CVE-2026-41235
Froxlor has an authorization bypass in FTP shell assignment - CVE-2026-41234
Froxlor: BIND Zone File Injection via TXT Record Content - CVE-2026-41233
Froxlor has a Reseller Domain Quota Bypass via Unvalidated a
Same vendor: froxlor
- CVE-2026-41237
Froxlor has an incomplete fix for CVE-2026-30932 - CVE-2026-41236
Froxlor has privilege escalation in SSH key synchronization - CVE-2026-41235
Froxlor has an authorization bypass in FTP shell assignment - CVE-2026-41234
Froxlor: BIND Zone File Injection via TXT Record Content - CVE-2026-41233
Froxlor has a Reseller Domain Quota Bypass via Unvalidated a
Same weakness: CWE-74
- CVE-2026-54159
ps_facetedsearch: PHP Object Injection in faceted search cac - CVE-2026-44182
Jupyter Enterprise Gateway Has Kubernetes Manifest Injection - CVE-2026-56699
Wazuh Manager - NDJSON Injection in inventory_sync via Agent - CVE-2026-58493
grav-plugin-database: DSN Parameter Injection via Unsanitize - CVE-2026-55615
Langroid: Neo4jChatAgent executes LLM-generated Cypher witho
V. Comments for CVE-2026-30932
No comments yet