World Wires · story 32795 · official · 1 source(s)

Critical Account Takeover Vulnerability in PHPNuxBill

PHPNuxBill up to 2025.3.20 contains an account takeover vulnerability in the password reset flow allowing unauthenticated attackers to brute-force OTP code

Open in the desk

Coverage

• Critical Account Takeover Vulnerability in PHPNuxBill NVD: critical CVEs · tier A · clear net · 2026-10-09 15:17 UTC

What this site indexes