Read the docs

fluxbox

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

fluxbox records in CISA KEV

No fluxbox vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-85964 CVE-2026-123784 · GHSA-c5cr-c2wq-j45j

OS command injection in Fluxbox style background values

Priority LOW 38

Fluxbox through 1.3.7 contains an OS command injection vulnerability in RootTheme::reconfigTheme() that allows attackers to execute commands via crafted style background values.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00708 Published 2026-11-06 No fix listed CWE-78
TI-2026-85965 CVE-2026-123785 · GHSA-8g4r-mwj3-fw99

Infinite loop in Fluxbox menu update via style geometry

Priority LOW 29

Fluxbox through 1.3.7 contains an infinite loop vulnerability in Menu::updateMenu() in src/FbTk/Menu.cc that allows attackers to hang the window manager via crafted style geometry values.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00165 Published 2026-11-06 No fix listed CWE-835
Open these records in search →