Skip to content
Sangoma vulnerabilities
Newest
-
sangoma freepbx, freepbx security-reporting +1 more
FreePBX: Authenticated API generatedocs Host Command Injection
CVE-2026-75600
8.6 High
-
sangoma freepbx, freepbx security-reporting +1 more
FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)
CVE-2026-54710
8.6 High
-
sangoma freepbx, freepbx security-reporting +1 more
Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module
CVE-2026-54708
8.6 High
-
sangoma freepbx, freepbx security-reporting +1 more
FreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module
CVE-2026-54675
8.7 High
-
sangoma freepbx, freepbx security-reporting +1 more
Authenticated Command Injection in FreePBX UCP Interface
CVE-2026-54674
8.6 High
-
sangoma freepbx, freepbx security-reporting +1 more
FreePBX: Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module
CVE-2026-45562
7.7 High
-
freepbx ucp, sangoma freepbx +1 more
FreePBX UCP: Unauthenticated remote code execution via socket.io namespace auth bypass and AMI action injection
CVE-2026-73665
9.3 Critical
-
freepbx missedcall, sangoma freepbx +1 more
FreePBX: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover
CVE-2026-73663
9.3 Critical
-
freepbx music, sangoma freepbx +1 more
Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files
CVE-2026-73662
7.6 High
-
flarum framework, sangoma freepbx +1 more
FreePBX: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup
CVE-2026-73661
8.6 High
-
sangoma switchvox smb edition
Authenticated Stored Cross-Site Scripting (XSS) in Switchvox SMB Web Portal
CVE-2026-9588
7.0 High
-
sangoma switchvox smb edition
Authenticated Local File Inclusion (LFI) in Switchvox SMB Web Portal
CVE-2026-9587
7.1 High
-
sangoma switchvox, switchvox smb edition +1 more
Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB
CVE-2026-9586
In KEVPublic exploit
EPSS 19.0%
9.3 Critical
-
sangoma switchvox smb edition
Unauthenticated Reflected Cross-Site Scripting (XSS) in Switchvox SMB Web Portal
CVE-2026-9585
8.6 High
-
sangoma freepbx, freepbx security-reporting +1 more
FreePBX: Authenticated Access can lead to Subsequent OAuth2 Authentication Bypass in API Module
CVE-2026-44237
7.6 High
-
sangoma freepbx, freepbx security-reporting +1 more
FreePBX: Authenticated SQL Injection via ORDER BY in CDR Reports
CVE-2026-44238
8.5 High
-
sangoma freepbx, freepbx security-reporting +1 more
FreePBX: Authenticated Local File Inclusion in Dashboard Module
CVE-2026-44239
7.6 High
-
sangoma freepbx, freepbx security-reporting +1 more
FreePBX: Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface
CVE-2026-46376
9.3 Critical
-
sangoma switchvox
Sangoma Switchvox before 8.4 places cleartext SIP authentication credentials in a backup file.
CVE-2026-45362
3.2 Low
-
sangoma freepbx, freepbx security-reporting +1 more
FreePBX: Authenticated Remote Code Execution via Recordings Module AJAX Endpoints
CVE-2026-28287
8.6 High
-
sangoma freepbx, freepbx security-reporting +1 more
FreePBX: Authenticated SQL Injection Vulnerabilities in FreePBX Logfiles Module
CVE-2026-28284
8.6 High
-
sangoma freepbx, freepbx security-reporting +1 more
FreePBX: Authenticated SQL Injection in CDR (Call Data Record) Reports
CVE-2026-28210
8.6 High
-
sangoma freepbx, freepbx security-reporting +1 more
FreePBX: Command Injection leading to Remote Code Execution in FreePBX ElevenLabs Text-to-Speech integration
CVE-2026-28209
7.5 High
-
freepbx api, sangoma freepbx +1 more
FreePBX API has a Privilege Escalation Error in GraphQL Allowing Authenticated Users to Access Additional Scopes
CVE-2025-55210
2.0 Low
-
asterisk, sangoma certified asterisk +1 more
ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation
CVE-2026-23741
Fix available
0.0 None
-
asterisk, sangoma certified asterisk +1 more
Asterisk vulnerable to potential privilege escalation
CVE-2026-23740
Fix available
0.0 None
-
asterisk, sangoma certified asterisk +1 more
Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection
CVE-2026-23739
Fix available
2.0 Low
-
asterisk, sangoma certified asterisk +1 more
The Asterisk embedded web server 's /httpstatus page echos user supplied values(cookie and query string) without sanitization
CVE-2026-23738
Fix available
3.5 Low
-
freepbx tts, sangoma freepbx +1 more
Authenticated SQL Injection in FreePBX tts (Text To Speech) module
CVE-2025-67736
8.6 High
-
flarum framework, sangoma freepbx +1 more
Authenticated amportal search for ‘freepbx_engine’ in non root writeable directories leads to potential privilege escalation
CVE-2025-67722
5.7 Medium
-
freepbx
FreePBX 16 Authenticated Remote Code Execution via API Module
CVE-2024-58294
8.7 High
-
sangoma freepbx, flarum framework +1 more
FreePBX Endpoint Manager Allows Unauthenticated Logins to Administrator Control Panel via Forged Basic Auth Header
CVE-2025-66039
Public exploit
9.3 Critical
-
bridgehead software filestore, sangoma freepbx +1 more
FreePBX Administration GUI is Vulnerable to Authenticated Command Injection
CVE-2025-64328
In KEVPublic exploit
EPSS 84.6%
8.6 High
-
freepbx core, sangoma freepbx +1 more
FreePBX core module vulnerable to reflected cross-site scripting via Asterisk HTTP Status page
CVE-2025-59429
8.5 High
-
asterisk, sangoma certified asterisk +1 more
Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation
CVE-2025-1131
Fix available
7.0 High
-
sangoma freepbx, flarum framework +1 more
FreePBX vulnerable to unauthenticated Denial of Service
CVE-2025-59056
6.6 Medium
-
flarum framework, sangoma freepbx +1 more
FreePBX Post-Authenticated Command Injection
CVE-2025-55211
6.3 Medium
-
elastic endpoint, sangoma freepbx +1 more
FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE
CVE-2025-57819
In KEVPublic exploit
EPSS 95.2%
10.0 Critical
-
asterisk
Asterisk can crash from a specifically malformed Authorization header in an incoming SIP request
CVE-2025-57767
Fix available
7.5 High
-
asterisk, sangoma certified asterisk +1 more
Asterisk remotely exploitable leak of RTP UDP ports and internal resources
CVE-2025-54995
Fix available
6.5 Medium
-
asterisk, sangoma certified asterisk +1 more
Asterisk is Vulnerable to Remote DoS and possible RCE Attacks During Memory Allocation
CVE-2025-49832
Fix available
6.5 Medium
-
sangoma img2020 firmware
A buffer overflow in the the Sangoma IMG2020 HTTP server through 2.3.9.6 allows an...
CVE-2025-32105
9.8 Critical
-
asterisk, sangoma certified asterisk +1 more
cli_permissions.conf: deny option does not work for disallowing shell commands
CVE-2025-47780
Fix available
4.8 Medium
-
asterisk, sangoma certified asterisk +1 more
Using malformed From header can forge identity with ";" or NULL in name portion
CVE-2025-47779
Fix available
7.7 High
-
sangoma asterisk
Insecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute arbitrary...
CVE-2024-57520
Fix availableDisputed
9.8 Critical
-
sangoma asterisk, debian linux +1 more
An issue in the action_listcategories() function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0...
CVE-2024-53566
Fix available
5.5 Medium
-
coalescent systems freepbx
An authenticated arbitrary file upload vulnerability in the component /module_admin/upload.php of...
CVE-2024-53564
Disputed
2.2 Low
-
asterisk, sangoma certified asterisk +1 more
A malformed Contact or Record-Route URI in an incoming SIP request can cause Asterisk to crash when res_resolver_unbound is used
CVE-2024-42491
Fix available
5.7 Medium
-
asterisk
Asterisk' res_pjsip_endpoint_identifier_ip: wrongly matches ALL unauthorized SIP requests
CVE-2024-35190
Fix available
5.8 Medium
-
sangoma freepbx linux 7
Sangoma FreePBX 1805 through 2203 on Linux contains hardcoded credentials for the Asterisk REST...
CVE-2023-26566
8.6 High
- Show olderLoading…