FreePBX / Api

3 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-40520	FreePBX api module Command Injection via GraphQL	HIGH	8.6	Apr 21, 2026
CVE-2025-55210	FreePBX API has a Privilege Escalation Error in GraphQL Allowing Authenticated Users to Access Additional Scopes	LOW	2.0	Feb 12, 2026
CVE-2025-55739	api: Shared OAuth Signing Key Between Different Instances	MEDIUM	5.1	Sep 4, 2025

Rows per page

Showing 1 to 3 of 3 CVEs