FO
Product
FOSSBilling
43
CVEs
0
On KEV
10.0
Max CVSS
4
New 30D
Severity mix
Critical 6High 13Medium 21Low 3
Watch
Add FOSSBilling to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-111046 | 2.3 | Oct 19 | FOSSBilling: Low-privileged staff can read and modify configuration of deactivated extensions Affected: >= 0.8.4, < 0.8.6 |
| CVE-2026-53640 | 2.3 | Jul 6 | FOSSBilling missing authorization checks on read-only admin API endpoints expose sensitive staff, client, and redirect data Affected: < 0.8.0 |
| CVE-2026-43928 | 2.3 | Jul 6 | FOSSBilling: Payment amount not validated in PayPalEmail adapter allows invoice underpayment Affected: < 0.8.0 |
Showing 3