All 3 CVE vulnerabilities found in phpnuxbill, with AI-generated Chinese analysis, references, and POCs.
Vendor: hotspotbilling
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-108108 | PHPNuxBill through 2025.3.20 CHAP Authentication Bypass via Password::chap_verify() CWE-287 | 7.1 | High | 2026-10-09 |
| CVE-2026-108109 | PHPNuxBill through 2025.3.20 Account Takeover via Brute-Forceable Password Reset Code CWE-307 | 9.1 | Critical | 2026-10-09 |
| CVE-2026-108107 | PHPNuxBill through 2025.3.20 Unauthenticated SQL Injection via radius.php CWE-89 | 9.8 | Critical | 2026-10-09 |
All 3 known CVE vulnerabilities affecting phpnuxbill with full Chinese analysis, references, and POCs where available.