CVE-2026-108107Published
PHPNuxBill through 2025.3.20 Unauthenticated SQL Injection via radius.php
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-108107 · Microsoft / collected KEV context
cve-program · CVE-2026-108107
- https://github.com/hotspotbilling/phpnuxbill/security/advisories/GHSA-q8ch-r8cv-q579
- https://github.com/hotspotbilling/phpnuxbill/blob/2025.3.13/radius.php#L277
- https://github.com/hotspotbilling/phpnuxbill
- https://www.vulncheck.com/advisories/phpnuxbill-through-2025.3.20-unauthenticated-sql-injection-via-radius-php
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.