[ Vendor · 3 CVEs ]
hotspotbilling
CVEs affecting hotspotbilling published in the last 30 days, plus any hotspotbilling CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-108109 | 9 Oct 2026 | CVSS 9.1 | hotspotbilling phpnuxbillPHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/controllers/forgot.php that… | |
| CVE-2026-108107 | 9 Oct 2026 | CVSS 9.8 | hotspotbilling phpnuxbillPHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates… | |
| CVE-2026-108108 | 9 Oct 2026 | CVSS 7.1 | hotspotbilling phpnuxbillPHPNuxBill through 2025.3.20 contains an authentication bypass vulnerability in RADIUS CHAP verification because Password::chap_verify() returns true… |