Skip to content
OpenAdvisories

Vendor

FOSSBilling

43 known vulnerabilities.

Products

FOSSBilling 32 fossbilling/fossbilling 11
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-53647 Public exploit

    FOSSBilling vulnerable to unauthenticated API key configuration disclosure via guest Serviceapikey get_info endpoint

    FOSSBilling is a free, open-source billing and client management system. In versions 0.5.3 through 0.7.2, the Guest `serviceapikey/get_info` API endpoint is accessible without authentication. Any caller with a valid API key can retrieve all custom configurati…

    FOSSBilling FOSSBilling
  • Critical 9.4
    CVE-2026-28496 Public exploit

    FOSSBilling: Server-side template injection in Twig template rendering enables information disclosure and RCE

    FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 have a Server-Side Template Injection (SSTI) vulnerability in the template rendering system. Administrators with access to features that render Twig templates (em…

    FOSSBilling FOSSBilling