Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

2 matching records.

1. 35
   CVE NVD 2h ago

   FOSSBilling is an open source billing and client-management platform.

   FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.9, the admin/support/note_create endpoint stores the note parameter without sanitization in the support_ticket_note table, and…

   CVSS 8.4 Fix available CVE-2026-111048 FOSSBilling Web platform
2. 5
   CVE NVD 3d ago

   FOSSBilling before 0.8.9 contains a Cross-Site Request Forgery vulnerability in the staff guest login endpoint (POST /api/guest/staff/login) that…

   FOSSBilling before 0.8.9 contains a Cross-Site Request Forgery vulnerability in the staff guest login endpoint (POST /api/guest/staff/login) that allows remote attackers to force authentication because…

   CVSS 4.3 CVE-2026-112374 FOSSBilling

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=FOSSBilling&limit=100. RSS for this section: feed.xml.