Information disclosure in Fossbilling

CVE-2026-40495

FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 leak the exact system version through asset cache buster parameters in HTML output, bypassing the `hide_version_public` security setting. The…

Vulnerability class: Information Disclosure

EPSS: 0.000 (13.2th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References