Skip to content
OpenAdvisories

Vendor

FOSSBilling

43 known vulnerabilities.

Products

FOSSBilling 32 fossbilling/fossbilling 11
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2026-53647 Public exploit

    FOSSBilling vulnerable to unauthenticated API key configuration disclosure via guest Serviceapikey get_info endpoint

    FOSSBilling is a free, open-source billing and client management system. In versions 0.5.3 through 0.7.2, the Guest `serviceapikey/get_info` API endpoint is accessible without authentication. Any caller with a valid API key can retrieve all custom configurati…

    FOSSBilling FOSSBilling