hotspotbilling
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| phpnuxbill | 3 | – | Oct 9, 2026 |
Exploited and recent CVEs
- CVE-2026-108109 PHPNuxBill through 2025.3.20 Account Takeover via Brute-Forceable Password Reset Code 0.4%
- CVE-2026-108108 PHPNuxBill through 2025.3.20 CHAP Authentication Bypass via Password::chap_verify() 0.3%
- CVE-2026-108107 PHPNuxBill through 2025.3.20 Unauthenticated SQL Injection via radius.php 0.4%