FreePBX / Security-Reporting
15 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-54675 | FreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module | HIGH | 8.7 | Sep 28, 2026 |
| CVE-2026-54674 | Authenticated Command Injection in FreePBX UCP Interface | HIGH | 8.6 | Sep 28, 2026 |
| CVE-2026-45562 | FreePBX: Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module | HIGH | 7.7 | Sep 28, 2026 |
| CVE-2026-75600 | FreePBX: Authenticated API generatedocs Host Command Injection | HIGH | 8.6 | Sep 28, 2026 |
| CVE-2026-54710 | FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion) | HIGH | 8.6 | Sep 28, 2026 |
| CVE-2026-54708 | Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module | HIGH | 8.6 | Sep 28, 2026 |
| CVE-2026-44237 | FreePBX: Authenticated Access can lead to Subsequent OAuth2 Authentication Bypass in API Module | HIGH | 7.6 | May 29, 2026 |
| CVE-2026-44238 | FreePBX: Authenticated SQL Injection via ORDER BY in CDR Reports | HIGH | 8.5 | May 29, 2026 |
| CVE-2026-44239 | FreePBX: Authenticated Local File Inclusion in Dashboard Module | HIGH | 7.6 | May 29, 2026 |
| CVE-2026-46376 | FreePBX: Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface | CRITICAL | 9.3 | May 29, 2026 |
| CVE-2026-26978 | Free PBX backup: Deserialization of Untrusted Data in admin/modules/backup/Models/BackupSplFileInfo.php | HIGH | 8.6 | May 18, 2026 |
| CVE-2026-28287 | FreePBX: Authenticated Remote Code Execution via Recordings Module AJAX Endpoints | HIGH | 8.6 | Mar 5, 2026 |
| CVE-2026-28284 | FreePBX: Authenticated SQL Injection Vulnerabilities in FreePBX Logfiles Module | HIGH | 8.6 | Mar 5, 2026 |
| CVE-2026-28210 | FreePBX: Authenticated SQL Injection in CDR (Call Data Record) Reports | HIGH | 8.6 | Mar 5, 2026 |
| CVE-2026-28209 | FreePBX: Command Injection leading to Remote Code Execution in FreePBX ElevenLabs Text-to-Speech integration | HIGH | 7.5 | Mar 5, 2026 |
Showing 1 to 15 of 15 CVEs