Freepbx vulnerabilities

Products

• Security-reporting 15
• Freepbx 11
• Framework 5
• Api 4
• Endpoint 4
• Contactmanager 2
• Endpointman 2
• Tts 2

Newest

• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Authenticated API generatedocs Host Command Injection CVE-2026-75600 8.6 HighSeptember 28, 2026
• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion) CVE-2026-54710 8.6 HighSeptember 28, 2026
• sangoma freepbx, freepbx security-reporting +1 more Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module CVE-2026-54708 8.6 HighSeptember 28, 2026
• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module CVE-2026-54675 8.7 HighSeptember 28, 2026
• sangoma freepbx, freepbx security-reporting +1 more Authenticated Command Injection in FreePBX UCP Interface CVE-2026-54674 8.6 HighSeptember 28, 2026
• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module CVE-2026-45562 7.7 HighSeptember 28, 2026
• freepbx ucp, sangoma freepbx +1 more FreePBX UCP: Unauthenticated remote code execution via socket.io namespace auth bypass and AMI action injection CVE-2026-73665 9.3 CriticalAugust 13, 2026
• freepbx backup FreePBX: Authenticated Arbitrary SSH Key Injection via Backup Module CVE-2026-73664 8.6 HighAugust 13, 2026
• freepbx missedcall, sangoma freepbx +1 more FreePBX: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover CVE-2026-73663 9.3 CriticalAugust 13, 2026
• freepbx music, sangoma freepbx +1 more Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files CVE-2026-73662 7.6 HighAugust 13, 2026
• flarum framework, sangoma freepbx +1 more FreePBX: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup CVE-2026-73661 8.6 HighAugust 13, 2026
• freepbx tts FreePBX: Authenticated TTS AGI Command Injection Through TTS Name CVE-2026-73660 7.5 HighAugust 13, 2026
• freepbx framework FreePBX Framework - Missing CSRF Protection in Admin Panel Ajax Dispatcher CVE-2026-72578 8.8 HighAugust 10, 2026
• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Authenticated Access can lead to Subsequent OAuth2 Authentication Bypass in API Module CVE-2026-44237 7.6 HighMay 29, 2026
• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Authenticated SQL Injection via ORDER BY in CDR Reports CVE-2026-44238 8.5 HighMay 29, 2026
• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Authenticated Local File Inclusion in Dashboard Module CVE-2026-44239 7.6 HighMay 29, 2026
• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface CVE-2026-46376 9.3 CriticalMay 29, 2026
• freepbx security-reporting Free PBX backup: Deserialization of Untrusted Data in admin/modules/backup/Models/BackupSplFileInfo.php CVE-2026-26978 8.6 HighMay 18, 2026
• freepbx api FreePBX api module Command Injection via GraphQL CVE-2026-40520 8.6 HighApril 21, 2026
• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Authenticated Remote Code Execution via Recordings Module AJAX Endpoints CVE-2026-28287 8.6 HighMarch 5, 2026
• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Authenticated SQL Injection Vulnerabilities in FreePBX Logfiles Module CVE-2026-28284 8.6 HighMarch 5, 2026
• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Authenticated SQL Injection in CDR (Call Data Record) Reports CVE-2026-28210 8.6 HighMarch 5, 2026
• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Command Injection leading to Remote Code Execution in FreePBX ElevenLabs Text-to-Speech integration CVE-2026-28209 7.5 HighMarch 5, 2026
• freepbx api, sangoma freepbx +1 more FreePBX API has a Privilege Escalation Error in GraphQL Allowing Authenticated Users to Access Additional Scopes CVE-2025-55210 2.0 LowFebruary 12, 2026
• freepbx tts, sangoma freepbx +1 more Authenticated SQL Injection in FreePBX tts (Text To Speech) module CVE-2025-67736 8.6 HighDecember 16, 2025
• flarum framework, sangoma freepbx +1 more Authenticated amportal search for ‘freepbx_engine’ in non root writeable directories leads to potential privilege escalation CVE-2025-67722 5.7 MediumDecember 16, 2025
• freepbx FreePBX 16 Authenticated Remote Code Execution via API Module CVE-2024-58294 8.7 HighDecember 11, 2025
• elastic endpoint FreePBX Endpoint Manager's Weak Default Password Allows Unauthenticated Access in Endpoint Module REST API CVE-2025-67513 6.9 MediumDecember 10, 2025
• sangoma freepbx, flarum framework +1 more FreePBX Endpoint Manager Allows Unauthenticated Logins to Administrator Control Panel via Forged Basic Auth Header CVE-2025-66039 Public exploit 9.3 CriticalDecember 9, 2025
• freepbx restapps Authenticated SQL Injection in Endpoint Module Rest API CVE-2025-62173 8.6 HighDecember 3, 2025
• bridgehead software filestore, sangoma freepbx +1 more FreePBX Administration GUI is Vulnerable to Authenticated Command Injection CVE-2025-64328 In KEVPublic exploit EPSS 84.6% 8.6 HighNovember 7, 2025
• freepbx endpointman FreePBX Endpoint Manager vulnerable to authenticated arbitrary file upload via fwbrand parameter CVE-2025-61678 Public exploit EPSS 45.6% 8.6 HighOctober 14, 2025
• elastic endpoint FreePBX Endpoint Manager vulnerable to authenticated SQL injection in multiple configuration parameters CVE-2025-61675 Public exploit EPSS 40.3% 8.6 HighOctober 14, 2025
• freepbx core, sangoma freepbx +1 more FreePBX core module vulnerable to reflected cross-site scripting via Asterisk HTTP Status page CVE-2025-59429 8.5 HighOctober 14, 2025
• elastic endpoint FreePBX Endpoint Manager command injection via Network Scanning feature CVE-2025-59051 8.6 HighOctober 14, 2025
• sangoma freepbx, flarum framework +1 more FreePBX vulnerable to unauthenticated Denial of Service CVE-2025-59056 6.6 MediumSeptember 15, 2025
• flarum framework, sangoma freepbx +1 more FreePBX Post-Authenticated Command Injection CVE-2025-55211 6.3 MediumSeptember 15, 2025
• freepbx api api: Shared OAuth Signing Key Between Different Instances CVE-2025-55739 5.1 MediumSeptember 4, 2025
• freepbx contactmanager FreePBX UCP is Vulnerable to Stored XSS Through its User Control Panel CVE-2025-55209 5.1 MediumSeptember 4, 2025
• elastic endpoint, sangoma freepbx +1 more FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE CVE-2025-57819 In KEVPublic exploit EPSS 95.2% 10.0 CriticalAugust 28, 2025
• freepbx api Passbolt API before 5, if the server is misconfigured (with an incorrect installation process and... CVE-2025-27913 2.1 LowMarch 10, 2025
• coalescent systems freepbx An authenticated arbitrary file upload vulnerability in the component /module_admin/upload.php of... CVE-2024-53564 Disputed 2.2 LowDecember 2, 2024
• freepbx endpoint manager, endpointman +1 more OSS Endpoint Manager allows unauthorized access to read system files CVE-2024-47071 6.8 MediumOctober 1, 2024
• freepbx arimanager, sangoma freepbx +1 more FreePBX arimanager Views cross site scripting CVE-2019-25090 3.5 LowDecember 27, 2022
• freebpx voicemail FreePBX voicemail page.voicemail.php cross site scripting CVE-2021-4282 3.5 LowDecember 27, 2022
• freepbx cdr, sangoma freepbx +1 more FreePBX cdr Cdr.class.php ajaxHandler sql injection CVE-2020-36630 5.5 MediumDecember 25, 2022
• freepbx manager, sangoma freepbx +1 more An issue was discovered in Manager 13.x before 13.0.2.6 and 15.x before 15.0.6 before FreePBX 14... CVE-2019-16967 6.1 MediumOctober 21, 2019
• freepbx contactmanager, sangoma freepbx +1 more An issue was discovered in Contactmanager 13.x before 13.0.45.3, 14.x before 14.0.5.12, and 15.x... CVE-2019-16966 6.1 MediumOctober 21, 2019
• freepbx An issue was discovered in FreePBX core before 3.0.122.43, 14.0.18.34, and 5.0.1beta4. By... CVE-2018-15891 4.8 MediumJune 20, 2019
• freepbx disa FreePBX 13 and 14 has SQL Injection in the DISA module via the hangup variable on the /admin... CVE-2018-15892 4.3 MediumJune 20, 2019
• Show olderLoading…