⤷ Title: FOSSBilling Template Injection Flaw Exploited in the Wild
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 08:11:44 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_28496 #FOSSBilling #Remote Code Execution #ssti #Template Injection
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 08:11:44 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_28496 #FOSSBilling #Remote Code Execution #ssti #Template Injection
Daily CyberSecurity
FOSSBilling Template Injection Flaw Exploited in the Wild
A FOSSBilling template injection flaw (CVE-2026-28496, CVSS 9.4) is exploited in the wild. Patch to 0.8.0 now to stop server-side template injection.