Products: 1
Vulnerabilities: 44
Known Exploited: 0
2
Critical Level Threats
4
High Level Threats
7
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-111048
FOSSBilling: Low-privileged staff can run JavaScript in administrators' browsers via stored XSS in support ticket notes
Last Modified: Nov 03, 2026
Published: Nov 02, 2026
CVE-2026-112374
FOSSBilling before 0.8.9 Login CSRF via Staff Guest Login API
Last Modified: Oct 30, 2026
Published: Oct 30, 2026
CVE-2026-111056
FOSSBilling: Unauthenticated client account enumeration via guest signup endpoint
Last Modified: Oct 19, 2026
Published: Oct 19, 2026
CVE-2026-111053
FOSSBilling: Unauthenticated attacker can probe existence of arbitrary files via guest/system/template_exists
Last Modified: Oct 19, 2026
Published: Oct 19, 2026
CVE-2026-111046
FOSSBilling: Low-privileged staff can read and modify configuration of deactivated extensions
Last Modified: Oct 19, 2026
Published: Oct 19, 2026
Items Per Page
