Freepbx Framework vulnerabilities

• flarum framework, sangoma freepbx +1 more FreePBX: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup CVE-2026-73661 8.6 HighAugust 13, 2026
• freepbx framework FreePBX Framework - Missing CSRF Protection in Admin Panel Ajax Dispatcher CVE-2026-72578 8.8 HighAugust 10, 2026
• flarum framework, sangoma freepbx +1 more Authenticated amportal search for ‘freepbx_engine’ in non root writeable directories leads to potential privilege escalation CVE-2025-67722 5.7 MediumDecember 16, 2025
• sangoma freepbx, flarum framework +1 more FreePBX Endpoint Manager Allows Unauthenticated Logins to Administrator Control Panel via Forged Basic Auth Header CVE-2025-66039 Public exploit 9.3 CriticalDecember 9, 2025
• sangoma freepbx, flarum framework +1 more FreePBX vulnerable to unauthenticated Denial of Service CVE-2025-59056 6.6 MediumSeptember 15, 2025
• flarum framework, sangoma freepbx +1 more FreePBX Post-Authenticated Command Injection CVE-2025-55211 6.3 MediumSeptember 15, 2025