CVE-2026-111056 | FOSSBilling up to 0.8.6 Guest API /api/guest/client/create information disclosure (EUVD-2026-104418)

October 19, 2026 Yanac

A vulnerability was found in FOSSBilling up to 0.8.6. It has been classified as problematic. Impacted is the function BoxModClientApiGuest::create of the file /api/guest/client/create of the component Guest API. Performing a manipulation results in information disclosure.

This vulnerability is reported as CVE-2026-111056. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More