CVE ID :CVE-2026-108107 Published : Oct. 9, 2026, 2:33 p.m. | 56 minutes ago Description :PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRaw() queries. Attackers can...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-108107 - PHPNuxBill through 2025.3.20 Unauthenticated SQL Injection via radius.php

VERWANDTEARTIKEL

CVE-2026-96207

CVE-2026-15340 - Savannah lwIP SMTP client Classic Buffer Overflow

CVE-2026-95702 - Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFile

CVE-2026-39453 - Red Lion Controls N-Tron 700 Series Reachable Assertion

CVE-2026-33367 - Red Lion Controls N-Tron 700 Series Missing Authentication for Critical Function

CVE-2026-108109 - PHPNuxBill through 2025.3.20 Account Takeover via Brute-Forceable Password Reset Code