1 matches found
CVE-2026-42341: Missing Authentication for Critical Function
FOSSBilling is a free, open-source billing and client management system. Versions 0.6.0 through 0.7.2 have an unauthenticated payment bypass vulnerability in FOSSBilling's IPN callback endpoint. When the Custom payment adapter is enabled, an attacker can mark any unpaid invoice as paid and credit...
9.2CVSS5.9AI score0.00272EPSS
SaveExploits0References3
20