FreePBX security-reporting vulnerabilities

Newest CVEs

• CVE-2026-75600

  FreePBX: Authenticated API generatedocs Host Command Injection

  FreePBX · security-reporting

  High8.6
• CVE-2026-54710

  FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)

  FreePBX · security-reporting

  High8.6
• CVE-2026-54708

  Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module

  FreePBX · security-reporting

  High8.6
• CVE-2026-54675

  FreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module

  FreePBX · security-reporting

  High8.7
• CVE-2026-54674

  Authenticated Command Injection in FreePBX UCP Interface

  FreePBX · security-reporting

  High8.6
• CVE-2026-45562

  FreePBX: Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module

  FreePBX · security-reporting

  High7.7
• CVE-2026-44237

  FreePBX: Authenticated Access can lead to Subsequent OAuth2 Authentication Bypass in API Module

  FreePBX · security-reporting

  High7.6
• CVE-2026-44238

  FreePBX: Authenticated SQL Injection via ORDER BY in CDR Reports

  FreePBX · security-reporting

  High8.5
• CVE-2026-44239

  FreePBX: Authenticated Local File Inclusion in Dashboard Module

  FreePBX · security-reporting

  High7.6
• CVE-2026-46376

  FreePBX: Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface

  FreePBX · security-reporting

  Critical9.3