FreePBX api vulnerabilities

3 published CVEs name FreePBX api among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 2
Critical: 0
Known exploited: 0

Critical 0High 1Medium 1Low 1Not scored 0

CVEs per yearBy the year they were published

20251
20262

Newest CVEs

CVE-2026-40520
FreePBX api module Command Injection via GraphQL
FreePBX · api
High8.6
CVE-2025-55210
FreePBX API has a Privilege Escalation Error in GraphQL Allowing Authenticated Users to Access Additional Scopes
FreePBX · api
Low2.0
CVE-2025-55739
api: Shared OAuth Signing Key Between Different Instances
FreePBX · api
Medium5.1

Most common weaknesses