What’s Vulnerable › Products

hotspotbilling phpnuxbill vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your hotspotbilling phpnuxbill version is affected

Latest hotspotbilling phpnuxbill vulnerabilities

• CVE-2026-108109 — PHPNuxBill through 2025.3.20 Account Takeover via Brute-Forceable Password Reset Code (CVSS 9.1)
• CVE-2026-108108 — PHPNuxBill through 2025.3.20 CHAP Authentication Bypass via Password::chap_verify() (CVSS 7.1)
• CVE-2026-108107 — PHPNuxBill through 2025.3.20 Unauthenticated SQL Injection via radius.php (CVSS 9.8)