CVE-2026-116257

A vulnerability was determined in BillaBear up to 2025.01.03. Affected by this issue is the function processInstall of the file src/BillaBear/Controller/InstallController.php of the component Installation Handler. This manipulation causes missing authentication. Remote exploitation of the attack ...

EUVD-2026-109730

A vulnerability was determined in BillaBear up to 2025.01.03. Affected by this issue is the function processInstall of the file src/BillaBear/Controller/InstallController.php of the component Installation Handler. This manipulation causes missing authentication. Remote exploitation of the attack ...

CVE-2026-116257

The BillaBear software (versions up to 2025.01.03 ) contains a vulnerability in the Installation Handler component. Specifically, the processInstall function within src/BillaBear/Controller/InstallController.php lacks proper authentication (CWE-306 , CWE-287 ). This flaw allows for remote exploit...