CVE-2026-108108: Hotspotbilling Phpnuxbill

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

PHPNuxBill through 2025.3.20 contains an authentication bypass vulnerability in RADIUS CHAP verification because Password::chap_verify() returns true when the supplied response does not match. Attackers who know a valid customer or PPPoE username can log in through MikroTik hotspot or PPPoE CHAP with any incorrect password to obtain network access and consume that customer's plan.

Affected products

• Hotspotbilling Phpnuxbill: up to and including 2025.3.20

Published 2026-10-09. Last modified 2026-10-09.