CVE-2020-29311: Ubilling

Critical severity, CVSS 9.8. EPSS: 6.6% chance of exploitation in the next 30 days.

Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside the config file and being triggered by another part of the software.

Affected products

• Ubilling Ubilling: version 1.0.9 only

Published 2020-12-10. Last modified 2026-06-17.