Freepbx vulnerabilities
44 CVEs and advisories name Freepbx as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-75600FreePBX: Authenticated API generatedocs Host Command Injection
- CVE-2026-54710FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)
- CVE-2026-54708Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module
- CVE-2026-54675FreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module
- CVE-2026-54674Authenticated Command Injection in FreePBX UCP Interface
- CVE-2026-45562FreePBX: Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module
- CVE-2026-73665FreePBX UCP: Unauthenticated remote code execution via socket.io namespace auth bypass and AMI action injection
- CVE-2026-73664FreePBX: Authenticated Arbitrary SSH Key Injection via Backup Module
- CVE-2026-73663FreePBX: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover
- CVE-2026-73662Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files
- CVE-2026-73661FreePBX: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup
- CVE-2026-73660FreePBX: Authenticated TTS AGI Command Injection Through TTS Name
- CVE-2026-72578FreePBX Framework - Missing CSRF Protection in Admin Panel Ajax Dispatcher
- CVE-2026-44237FreePBX: Authenticated Access can lead to Subsequent OAuth2 Authentication Bypass in API Module
- CVE-2026-44238FreePBX: Authenticated SQL Injection via ORDER BY in CDR Reports
- CVE-2026-44239FreePBX: Authenticated Local File Inclusion in Dashboard Module
- CVE-2026-46376FreePBX: Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface
- CVE-2026-26978Free PBX backup: Deserialization of Untrusted Data in admin/modules/backup/Models/BackupSplFileInfo.php
- CVE-2026-40520FreePBX api module Command Injection via GraphQL
- CVE-2026-28287FreePBX: Authenticated Remote Code Execution via Recordings Module AJAX Endpoints
- CVE-2026-28284FreePBX: Authenticated SQL Injection Vulnerabilities in FreePBX Logfiles Module
- CVE-2026-28210FreePBX: Authenticated SQL Injection in CDR (Call Data Record) Reports
- CVE-2026-28209FreePBX: Command Injection leading to Remote Code Execution in FreePBX ElevenLabs Text-to-Speech integration
- CVE-2025-55210FreePBX API has a Privilege Escalation Error in GraphQL Allowing Authenticated Users to Access Additional Scopes
- CVE-2025-67736Authenticated SQL Injection in FreePBX tts (Text To Speech) module
- CVE-2025-67722Authenticated amportal search for ‘freepbx_engine’ in non root writeable directories leads to potential privilege escalation
- CVE-2024-58294FreePBX 16 Authenticated Remote Code Execution via API Module
- CVE-2025-67513FreePBX Endpoint Manager's Weak Default Password Allows Unauthenticated Access in Endpoint Module REST API
- CVE-2025-66039FreePBX Endpoint Manager Allows Unauthenticated Logins to Administrator Control Panel via Forged Basic Auth Header
- CVE-2025-62173Authenticated SQL Injection in Endpoint Module Rest API