Lucene search
+L

19 matches found

osv_cve
osv_cve
•added 2026/06/25 11:06 p.m.•29 views

CVE-2026-43920 FOSSBilling: Unauthenticated update patcher endpoint allows remote maintenance execution

FOSSBilling is a free, open-source billing and client management system. In versions 0.5.4 through 0.7.2, the /run-patcher maintenance endpoint in FOSSBilling was accessible without authentication, which allowed unauthenticated remote users to trigger update patch routines that modify configurati...

6.9CVSS6.2AI score
SaveExploits0References4
Rows per page
Query Builder