Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Softaculous Virtualizor 3.2.9 (Patch 9) Clear all filters
TI-2026-31745 CVE-2026-43643 · GHSA-g658-6cgx-fx2p

Softaculous Virtualizor Authorization Bypass via Billing Module Handler

Priority MEDIUM 45

Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains an authorization bypass vulnerability in the billing module handler that allows unauthenticated remote attackers to modify any tenant's account balance by…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00623 Published 2026-09-22 Fixed in 3.2.9 (Patch 9), 3.0.0 CWE-862
TI-2026-31744 CVE-2026-43642 · GHSA-gjf4-862p-rg96

Softaculous Virtualizor PHP Object Injection via Billing Module Handler

Priority MEDIUM 44

Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains a PHP object injection vulnerability in the billing module handler that allows unauthenticated remote attackers to supply arbitrary serialized PHP objects…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.0096 Published 2026-09-22 Fixed in 3.2.9 (Patch 9), 3.0.0 CWE-502
TI-2026-31743 CVE-2026-43641 · GHSA-x23m-fhhv-vj5x

Softaculous Virtualizor OS Command Injection via Billing Module Handler

Priority HIGH 81

Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains an OS command injection vulnerability in the billing module handler that allows unauthenticated remote attackers to execute arbitrary commands as root by…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03026 Published 2026-09-22 Fixed in 3.2.9 (Patch 9), 3.0.0 CWE-78