CVE-2026-111046 | FOSSBilling up to 0.8.5 config_get getConfig privileges management

October 19, 2026 Yanac

A vulnerability has been found in FOSSBilling up to 0.8.5 and classified as critical. This vulnerability affects the function getConfig of the file /api/admin/extension/config_get. This manipulation causes improper privilege management.

This vulnerability is registered as CVE-2026-111046. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More