CVE ID :CVE-2026-108109 Published : Oct. 9, 2026, 2:33 p.m. | 56 minutes ago Description :PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/controllers/forgot.php that allows unauthenticated attackers to brute-force the...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-108109 - PHPNuxBill through 2025.3.20 Account Takeover via Brute-Forceable Password Reset Code

VERWANDTEARTIKEL

CVE-2026-96207

CVE-2026-15340 - Savannah lwIP SMTP client Classic Buffer Overflow

CVE-2026-95702 - Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFile

CVE-2026-39453 - Red Lion Controls N-Tron 700 Series Reachable Assertion

CVE-2026-33367 - Red Lion Controls N-Tron 700 Series Missing Authentication for Critical Function

CVE-2026-108107 - PHPNuxBill through 2025.3.20 Unauthenticated SQL Injection via radius.php