Skip to contentSangoma Freepbx vulnerabilities
- sangoma freepbx, freepbx security-reporting +1 moreFreePBX: Authenticated API generatedocs Host Command InjectionCVE-2026-756008.6 High
- sangoma freepbx, freepbx security-reporting +1 moreFreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)CVE-2026-547108.6 High
- sangoma freepbx, freepbx security-reporting +1 moreAuthenticated Remote Code Execution via Path Traversal in FreePBX Backup ModuleCVE-2026-547088.6 High
- sangoma freepbx, freepbx security-reporting +1 moreFreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang ModuleCVE-2026-546758.7 High
- sangoma freepbx, freepbx security-reporting +1 moreAuthenticated Command Injection in FreePBX UCP InterfaceCVE-2026-546748.6 High
- sangoma freepbx, freepbx security-reporting +1 moreFreePBX: Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) ModuleCVE-2026-455627.7 High
- freepbx ucp, sangoma freepbx +1 moreFreePBX UCP: Unauthenticated remote code execution via socket.io namespace auth bypass and AMI action injectionCVE-2026-73665Public exploit9.3 Critical
- freepbx missedcall, sangoma freepbx +1 moreFreePBX: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeoverCVE-2026-73663Public exploit9.3 Critical
- freepbx music, sangoma freepbx +1 moreAuthenticated FreePBX Music RCE via mpg123 and Asterisk Call FilesCVE-2026-736627.6 High
- flarum framework, sangoma freepbx +1 moreFreePBX: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted BackupCVE-2026-736618.6 High
- sangoma freepbx, freepbx security-reporting +1 moreFreePBX: Authenticated Access can lead to Subsequent OAuth2 Authentication Bypass in API ModuleCVE-2026-442377.6 High
- sangoma freepbx, freepbx security-reporting +1 moreFreePBX: Authenticated SQL Injection via ORDER BY in CDR ReportsCVE-2026-442388.5 High
- sangoma freepbx, freepbx security-reporting +1 moreFreePBX: Authenticated Local File Inclusion in Dashboard ModuleCVE-2026-442397.6 High
- sangoma freepbx, freepbx security-reporting +1 moreFreePBX: Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP InterfaceCVE-2026-463769.3 Critical
- sangoma freepbx, freepbx security-reporting +1 moreFreePBX: Authenticated Remote Code Execution via Recordings Module AJAX EndpointsCVE-2026-282878.6 High
- sangoma freepbx, freepbx security-reporting +1 moreFreePBX: Authenticated SQL Injection Vulnerabilities in FreePBX Logfiles ModuleCVE-2026-282848.6 High
- sangoma freepbx, freepbx security-reporting +1 moreFreePBX: Authenticated SQL Injection in CDR (Call Data Record) ReportsCVE-2026-282108.6 High
- sangoma freepbx, freepbx security-reporting +1 moreFreePBX: Command Injection leading to Remote Code Execution in FreePBX ElevenLabs Text-to-Speech integrationCVE-2026-282097.5 High
- freepbx api, sangoma freepbx +1 moreFreePBX API has a Privilege Escalation Error in GraphQL Allowing Authenticated Users to Access Additional ScopesCVE-2025-552102.0 Low
- freepbx tts, sangoma freepbx +1 moreAuthenticated SQL Injection in FreePBX tts (Text To Speech) moduleCVE-2025-677368.6 High
- flarum framework, sangoma freepbx +1 moreAuthenticated amportal search for ‘freepbx_engine’ in non root writeable directories leads to potential privilege escalationCVE-2025-677225.7 Medium
- freepbxFreePBX 16 Authenticated Remote Code Execution via API ModuleCVE-2024-582948.7 High
- sangoma freepbx, flarum framework +1 moreFreePBX Endpoint Manager Allows Unauthenticated Logins to Administrator Control Panel via Forged Basic Auth HeaderCVE-2025-66039Public exploit9.3 Critical
- bridgehead software filestore, sangoma freepbx +1 moreFreePBX Administration GUI is Vulnerable to Authenticated Command InjectionCVE-2025-64328In KEVPublic exploitEPSS 84.6%8.6 High
- freepbx core, sangoma freepbx +1 moreFreePBX core module vulnerable to reflected cross-site scripting via Asterisk HTTP Status pageCVE-2025-594298.5 High
- sangoma freepbx, flarum framework +1 moreFreePBX vulnerable to unauthenticated Denial of ServiceCVE-2025-590566.6 Medium
- flarum framework, sangoma freepbx +1 moreFreePBX Post-Authenticated Command InjectionCVE-2025-552116.3 Medium
- elastic endpoint, sangoma freepbx +1 moreFreePBX Affected by Authentication Bypass Leading to SQL Injection and RCECVE-2025-57819In KEVPublic exploitEPSS 95.2%10.0 Critical
- coalescent systems freepbxAn authenticated arbitrary file upload vulnerability in the component /module_admin/upload.php of...CVE-2024-53564Disputed2.2 Low
- sangoma freepbx linux 7Sangoma FreePBX 1805 through 2203 on Linux contains hardcoded credentials for the Asterisk REST...CVE-2023-265668.6 High
- sangoma freepbxSangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to...CVE-2023-433368.8 High
- sangoma freepbx linux 7Sangoma FreePBX 1805 through 2302 (when obtained as a ,.ISO file) places AMPDBUSER, AMPDBPASS,...CVE-2023-265678.1 High
- freepbx arimanager, sangoma freepbx +1 moreFreePBX arimanager Views cross site scriptingCVE-2019-250903.5 Low
- freepbx cdr, sangoma freepbx +1 moreFreePBX cdr Cdr.class.php ajaxHandler sql injectionCVE-2020-366305.5 Medium
- sangoma freepbxAn XSS Injection vulnerability exists in Sangoma FreePBX and PBXact 13, 14, and 15 within the...CVE-2019-198524.8 Medium
- sangoma freepbxMultiple XSS vulnerabilities exist in the Backup & Restore module \ v14.0.10.2 through v14.0.10.7...CVE-2019-196154.8 Medium
- sangoma freepbxIn Sangoma FreePBX 13 through 15 and sysadmin (aka System Admin) 13.0.92 through 15.0.13.6...CVE-2019-195387.2 High
- sangoma freepbxAn XSS Injection vulnerability exists in Sangoma FreePBX and PBXact 13, 14, and 15 within the...CVE-2019-198514.8 Medium
- sangoma freepbxIn userman 13.0.76.43 through 15.0.20 in Sangoma FreePBX, XSS exists in the User Management...CVE-2019-195514.8 Medium
- sangoma freepbxIn userman 13.0.76.43 through 15.0.20 in Sangoma FreePBX, XSS exists in the user management...CVE-2019-195524.8 Medium
- sangoma freepbxSangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect...CVE-2019-19006In KEVEPSS 54.9%9.8 Critical
- freepbx manager, sangoma freepbx +1 moreAn issue was discovered in Manager 13.x before 13.0.2.6 and 15.x before 15.0.6 before FreePBX 14...CVE-2019-169676.1 Medium
- freepbx contactmanager, sangoma freepbx +1 moreAn issue was discovered in Contactmanager 13.x before 13.0.45.3, 14.x before 14.0.5.12, and 15.x...CVE-2019-169666.1 Medium
- freepbxAn issue was discovered in FreePBX core before 3.0.122.43, 14.0.18.34, and 5.0.1beta4. By...CVE-2018-158914.8 Medium
- sangoma freepbx** DISPUTED ** FreePBX 10.13.66-32bit and 14.0.1.24 (SNG7-PBX-64bit-1712-2) allow post...CVE-2018-6393Disputed7.2 High
- freepbxhtdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface (ARI) in...CVE-2014-7235Public exploitEPSS 43.9%10.0 High
- freepbxadmin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11...CVE-2014-1903Public exploitEPSS 51.8%7.5 High
- sangoma freepbxMultiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.9 and earlier allow remote...CVE-2012-4870Public exploit4.3 Medium
- sangoma freepbxThe callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and...CVE-2012-4869Public exploitEPSS 70.3%7.5 High
- sangoma freepbxDirectory traversal vulnerability in page.recordings.php in the System Recordings component in...CVE-2010-3490Public exploit6.5 Medium
- Show olderLoading…