CVE-2026-123784 | Fluxbox up to 1.3.7 RootTheme RootTheme::reconfigTheme os command injection

November 6, 2026 Yanac

A vulnerability labeled as problematic has been found in Fluxbox up to 1.3.7. This issue affects the function RootTheme::reconfigTheme of the component RootTheme. The manipulation results in os command injection.

This vulnerability is reported as CVE-2026-123784. The attack requires a local approach. No exploit exists.VulDB Recent EntriesRead More