Login Request a demo
FO
Product
FOSSBilling
by FOSSBilling · last CVE Oct 30, 2026
43
CVEs
0
On KEV
10.0
Max CVSS
4
New 30D
Vulnerabilities43In the news0Timeline
Severity mix
Critical 6High 13Medium 21Low 3
Severity
All severities43Critical6High13Medium21Low3
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add FOSSBilling to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-27604
10.0
1%
Jun 23
FOSSBilling: Improper API Role Validation (system) Enables Unauthenticated Access to Privileged Admin Functions
Affected: >= 0.5.4, < 0.8.0
CVE-2023-4005
9.8
0%
Jul 31
Insufficient Session Expiration in fossbilling/fossbilling
Affected: before 0.5.5
CVE-2023-3490
9.8
1%
Jun 30
SQL Injection in fossbilling/fossbilling
Affected: before 0.5.3
CVE-2026-28496
9.4
2%
Jun 23
FOSSBilling: Server-side template injection in Twig template rendering enables information disclosure and RCE
Affected: < 0.8.0
CVE-2026-33543
9.3
0%
Jun 24
FOSSBilling: Authentication bypass allows unauthenticated administrator creation
Affected: < 0.8.0
CVE-2026-42341
9.2
0%
Jul 6
FOSSBilling has an unauthenticated payment bypass via IPN callback forgery
Affected: >= 0.6.0, < 0.8.0
Showing 6