[ Vendor · 8 CVEs ]
FreePBX
CVEs affecting FreePBX published in the last 30 days, plus any FreePBX CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-75600 | 28 Sep 2026 | CVSS 8.8 | FreePBX security-reportingFreePBX is an open source IP PBX. Prior to version 17.0.9, authenticated users who are authorized to access the GraphQL api module interface of… | |
| CVE-2026-54710 | 28 Sep 2026 | CVSS 8.8 | FreePBX security-reportingFreePBX is an open source IP PBX. Prior to versions 16.0.40 and 17.0.7, a critical remote code execution (RCE) vulnerability exists in the superfecta… | |
| CVE-2026-54674 | 28 Sep 2026 | CVSS 8.8 | FreePBX security-reportingFreePBX is an open source IP PBX. Prior to versions 16.0.39 and 17.0.7, users authenticated via User Control Panel (UCP) are able to execute… | |
| CVE-2026-54675 | 28 Sep 2026 | CVSS 8.8 | FreePBX security-reportingFreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the sound language upload and conversion… | |
| CVE-2026-54708 | 28 Sep 2026 | CVSS 8.8 | FreePBX security-reportingFreePBX is an open source IP PBX. Prior to versions 16.0.72 and 17.0.7, a critical vulnerability exists in the FreePBX backup Module that allows… | |
| CVE-2026-45562 | 28 Sep 2026 | CVSS 7.2 | FreePBX security-reportingFreePBX is an open source IP PBX. Prior to versions 16.0.4 and 17.0.6, the FreePBX Music on Hold (MoH) module contains a critical security flaw that… | |
| CVE-2025-64328 | 7 Nov 2025 | CVSS 7.2 | Sangoma FreePBX OS Command InjectionFreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. In versions 17.0.2.36 and above before 17.0.3, the… | Exploited |
| CVE-2025-57819 | 28 Aug 2025 | CVSS 9.8 | Sangoma FreePBX Authentication BypassFreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized… | Exploited |