H
Vendor security profile
hotspotbilling
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs3
Critical2
CISA KEV0
Public exploit2
Patch rate%33
Avg. CVSS8.6
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
3
CVE KEV
CVE severity distribution
3toplam CVE
Critical2 (67%)
High1 (33%)
Patch and exploitation view
%33
Verified patch
%0
CISA KEV
%67
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
9.3
CVE-2026-108109
PHPNuxBill through 2025.3.20 Account Takeover via Brute-Forceable Password Reset Code
H
Patch verifiedEPSS %0
7.1
CVE-2026-108108
PHPNuxBill through 2025.3.20 CHAP Authentication Bypass via Password::chap_verify()
H
Patch status unknownEPSS %0
9.3
CVE-2026-108107
PHPNuxBill through 2025.3.20 Unauthenticated SQL Injection via radius.php
H
Patch status unknownEPSS %0