{"schema":"vulnpedia.research/1","cve":"CVE-2026-108108","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/hotspotbilling/phpnuxbill/security/advisories/GHSA-6f62-x25v-9686","tags":["vendor-advisory","exploit"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-09T14:33:31.585Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-09T14:33:31.585Z","url":"https://github.com/hotspotbilling/phpnuxbill/security/advisories/GHSA-6f62-x25v-9686"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-14T01:51:06.748Z","url":"https://github.com/hotspotbilling/phpnuxbill/security/advisories/GHSA-6f62-x25v-9686"},{"source":"nvd","sourceId":"CVE-2026-108108","modified":"2026-10-14T02:16:59.337","url":"https://github.com/hotspotbilling/phpnuxbill/security/advisories/GHSA-6f62-x25v-9686"}]},{"url":"https://github.com/hotspotbilling/phpnuxbill/blob/2025.3.13/system/autoload/Password.php#L48","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-09T14:33:31.585Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-09T14:33:31.585Z","url":"https://github.com/hotspotbilling/phpnuxbill/blob/2025.3.13/system/autoload/Password.php#L48"},{"source":"nvd","sourceId":"CVE-2026-108108","modified":"2026-10-14T02:16:59.337","url":"https://github.com/hotspotbilling/phpnuxbill/blob/2025.3.13/system/autoload/Password.php#L48"}]},{"url":"https://github.com/hotspotbilling/phpnuxbill","tags":["product"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-09T14:33:31.585Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-09T14:33:31.585Z","url":"https://github.com/hotspotbilling/phpnuxbill"},{"source":"nvd","sourceId":"CVE-2026-108108","modified":"2026-10-14T02:16:59.337","url":"https://github.com/hotspotbilling/phpnuxbill"}]},{"url":"https://www.vulncheck.com/advisories/phpnuxbill-through-2025.3.20-chap-authentication-bypass-via-password-chap-verify","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-09T14:33:31.585Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-09T14:33:31.585Z","url":"https://www.vulncheck.com/advisories/phpnuxbill-through-2025.3.20-chap-authentication-bypass-via-password-chap-verify"},{"source":"nvd","sourceId":"CVE-2026-108108","modified":"2026-10-14T02:16:59.337","url":"https://www.vulncheck.com/advisories/phpnuxbill-through-2025.3.20-chap-authentication-bypass-via-password-chap-verify"}]},{"source":"euvd","sourceId":"EUVD-2026-95809","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95809","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-95809","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95809"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}