6 matches found
CVE-2026-108108
PHPNuxBill through 2025.3.20 contains an authentication bypass vulnerability in RADIUS CHAP verification because Password::chapverify returns true when the supplied response does not match. Attackers who know a valid customer or PPPoE username can log in through MikroTik hotspot or PPPoE CHAP wit...
CVE-2026-108108
PHPNuxBill through 2025.3.20 contains an authentication bypass vulnerability in RADIUS CHAP verification because Password::chapverify returns true when the supplied response does not match. Attackers who know a valid customer or PPPoE username can log in through MikroTik hotspot or PPPoE CHAP wit...
CVE-2026-108108 PHPNuxBill through 2025.3.20 CHAP Authentication Bypass via Password::chap_verify()
PHPNuxBill through 2025.3.20 contains an authentication bypass vulnerability in RADIUS CHAP verification because Password::chapverify returns true when the supplied response does not match. Attackers who know a valid customer or PPPoE username can log in through MikroTik hotspot or PPPoE CHAP wit...
CVE-2026-108108 PHPNuxBill through 2025.3.20 CHAP Authentication Bypass via Password::chap_verify()
PHPNuxBill through 2025.3.20 contains an authentication bypass vulnerability in RADIUS CHAP verification because Password::chapverify returns true when the supplied response does not match. Attackers who know a valid customer or PPPoE username can log in through MikroTik hotspot or PPPoE CHAP wit...
CVE-2026-108108
PHPNuxBill versions up to 2025.3.20 are vulnerable to an authentication bypass in RADIUS CHAP verification. The root cause is located in the Password::chap_verify() function, which incorrectly returns true even when the supplied response does not match the expected value. This allows an attacker ...
EUVD-2026-95809
PHPNuxBill through 2025.3.20 contains an authentication bypass vulnerability in RADIUS CHAP verification because Password::chapverify returns true when the supplied response does not match. Attackers who know a valid customer or PPPoE username can log in through MikroTik hotspot or PPPoE CHAP wit...