Freepbx Security-reporting vulnerabilities

• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Authenticated API generatedocs Host Command Injection CVE-2026-75600 8.6 HighSeptember 28, 2026
• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion) CVE-2026-54710 8.6 HighSeptember 28, 2026
• sangoma freepbx, freepbx security-reporting +1 more Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module CVE-2026-54708 8.6 HighSeptember 28, 2026
• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module CVE-2026-54675 8.7 HighSeptember 28, 2026
• sangoma freepbx, freepbx security-reporting +1 more Authenticated Command Injection in FreePBX UCP Interface CVE-2026-54674 8.6 HighSeptember 28, 2026
• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module CVE-2026-45562 7.7 HighSeptember 28, 2026
• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Authenticated Access can lead to Subsequent OAuth2 Authentication Bypass in API Module CVE-2026-44237 7.6 HighMay 29, 2026
• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Authenticated SQL Injection via ORDER BY in CDR Reports CVE-2026-44238 8.5 HighMay 29, 2026
• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Authenticated Local File Inclusion in Dashboard Module CVE-2026-44239 7.6 HighMay 29, 2026
• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface CVE-2026-46376 9.3 CriticalMay 29, 2026
• freepbx security-reporting Free PBX backup: Deserialization of Untrusted Data in admin/modules/backup/Models/BackupSplFileInfo.php CVE-2026-26978 8.6 HighMay 18, 2026
• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Authenticated Remote Code Execution via Recordings Module AJAX Endpoints CVE-2026-28287 8.6 HighMarch 5, 2026
• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Authenticated SQL Injection Vulnerabilities in FreePBX Logfiles Module CVE-2026-28284 8.6 HighMarch 5, 2026
• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Authenticated SQL Injection in CDR (Call Data Record) Reports CVE-2026-28210 8.6 HighMarch 5, 2026
• sangoma freepbx, freepbx security-reporting +1 more FreePBX: Command Injection leading to Remote Code Execution in FreePBX ElevenLabs Text-to-Speech integration CVE-2026-28209 7.5 HighMarch 5, 2026