Auth bypass in Fossbilling

CVE-2026-23513

FOSSBilling is a free, open-source billing and client management system. In versions 0.7.2 and prior, a query-construction flaw in client list endpoints allowed authenticated clients to bypass tenant scoping and retrieve other clients’ dat…

Vulnerability class: Broken Access Control

EPSS: 0.003 (20.4th percentile) — read the EPSS interpretation.