Vulnerabilities
Hackers Steal PHPNuxBill Data via Critical CVE-2026-108107 SQLi in Versions up to 2025.3.20
Attackers can exploit CVE-2026-108107 to steal customer data and credentials from PHPNuxBill versions up to 2025.3.20.
PHPNuxBill
Everything RedTeam Monitor has reported about PHPNuxBill: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
PHPNuxBill Account Takeover Flaw Lets Attackers Hijack Customer Logins
A critical vulnerability in PHPNuxBill’s password reset flow allows unauthenticated attackers to brute-force codes and steal accounts.