Skip to content
OpenAdvisories

Vendor

FOSSBilling

43 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2026-28496 Public exploit Scanner template

    FOSSBilling: Server-side template injection in Twig template rendering enables information disclosure and RCE

    FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 have a Server-Side Template Injection (SSTI) vulnerability in the template rendering system. Administrators with access to features that render Twig templates (em…