{"uuid": "29fcc232-85e4-4f11-98dd-694bd8837675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-108108", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mxhcxeb5s526", "content": "PHPNuxBill through 2025.3.20 carries CVE-2026-108108 (CVSS 7.1).\nAttackers with a known username can bypass CHAP auth on MikroTik hotspots or PPPoE with any wrong password.\n\nhttps://thecircuitry.to/article/phpnuxbill-through-2025320-hit-by-cve-2026-108108-auth-bypass-mv14xwao", "creation_timestamp": "2026-10-09T15:44:52.970060Z"}