CVE-2026-112374 | FOSSBilling up to 0.8.8 Login Endpoint /api/guest/staff/login checkGuestClientAuthentication cross-site request forgery

October 30, 2026 Yanac

A vulnerability was found in FOSSBilling up to 0.8.8. It has been declared as problematic. This impacts the function checkGuestClientAuthentication of the file /api/guest/staff/login of the component Login Endpoint. Executing a manipulation can lead to cross-site request forgery.

The identification of this vulnerability is CVE-2026-112374. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More