FreePBX

Records56All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high29CVSS 7.0–8.9

Exploited now

FreePBX records in CISA KEV

TI-2025-39763 Sangoma FreePBX OS Command Injection Vulnerability CRITICAL 96KEV 2026-02-03 TI-2025-35702 Sangoma FreePBX Authentication Bypass Vulnerability CRITICAL 100KEV 2025-08-29

Components

Products in the NVD configurations · select one to filter the records

Freepbx 9 records HIGH Api 1 record MEDIUM Contactmanager 1 record LOW Disa 1 record LOW Manager 1 record LOW

Records

56 records

TI-2025-35702 CVE-2025-57819

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

CRITICAL 100KEV

FreePBX is an open-source web-based graphical user interface.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.95213 Published 2025-08-28 Fixed in 15.0.66, 16.0.89 +1 CWE-288

TI-2025-39763 CVE-2025-64328

FreePBX Administration GUI is Vulnerable to Authenticated Command Injection

CRITICAL 96KEV

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.84618 Published 2025-11-07 Fixed in 17.0.3 CWE-78

TI-2024-38391 CVE-2024-58294 · GHSA-3f55-6gfh-8xfx

FreePBX 16 Authenticated Remote Code Execution via API Module

HIGH 73

FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.03568 Published 2025-12-11 No fix listed CWE-78

TI-2014-06023 CVE-2014-7235 · GHSA-7pc8-wp58-mr3p

htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface…

HIGH 72

htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface (ARI) in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.1.5 allows remote attackers to execute arbitrary code via the ari_auth…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.43895 Published 2014-10-07 No fix listed CWE-94

TI-2025-36981 CVE-2025-59429

FreePBX core module vulnerable to reflected cross-site scripting via Asterisk HTTP Status page

HIGH 70

FreePBX is an open source GUI for managing Asterisk.

CVSS 4.0HIGH 8.5 Network Low privileges User interaction EPSS 0.00198 Published 2025-10-14 Fixed in 16.0.68.39, 17.0.18.38 CWE-79

TI-2025-38110 CVE-2025-61678

FreePBX Endpoint Manager vulnerable to authenticated arbitrary file upload via fwbrand parameter

HIGH 69

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.45632 Published 2025-10-14 Fixed in 16.0.92, 17.0.6 CWE-434

TI-2025-38107 CVE-2025-61675

FreePBX Endpoint Manager vulnerable to authenticated SQL injection in multiple configuration parameters

HIGH 67

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.40294 Published 2025-10-14 Fixed in 16.0.92, 17.0.6 CWE-89

TI-2014-01484 CVE-2014-1903 · GHSA-xvg7-pm76-82w3

admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15…

HIGH 65

admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 before 2.11.0.23, and 12 before 12.0.1alpha22 does not restrict the set of functions accessible to the API handler, which all…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.5181 Published 2014-02-18 No fix listed CWE-264

TI-2024-31453 CVE-2024-47071

OSS Endpoint Manager allows unauthorized access to read system files

MEDIUM 63

OSS Endpoint Manager is an endpoint manager module for FreePBX.

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00509 Published 2024-10-01 Fixed in 14.0.4 CWE-22

TI-2025-40565 CVE-2025-66039

FreePBX Endpoint Manager Allows Unauthenticated Logins to Administrator Control Panel via Forged Basic Auth Header

MEDIUM 54

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03391 Published 2025-12-09 Fixed in 16.0.44, 17.0.23 CWE-287

TI-2026-22594 CVE-2026-28287

FreePBX: Authenticated Remote Code Execution via Recordings Module AJAX Endpoints

MEDIUM 51

FreePBX is an open source IP PBX.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.09284 Published 2026-03-05 Fixed in 16.0.20, 17.0.5 CWE-78

TI-2025-41432 CVE-2025-67736

Authenticated SQL Injection in FreePBX tts (Text To Speech) module

MEDIUM 49

The FreePBX module tts (Text to Speech) for FreePBX, an open-source web-based graphical user interface (GUI) that manages Asterisk.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.06434 Published 2025-12-16 Fixed in 16.0.5, 17.0.5 CWE-89

TI-2026-51749 CVE-2026-73665

FreePBX UCP: Unauthenticated remote code execution via socket.io namespace auth bypass and AMI action injection

MEDIUM 48

FreePBX is an open source IP PBX.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00331 Published 2026-08-13 Fixed in 17.0.9 CWE-862

TI-2026-51747 CVE-2026-73663

FreePBX: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover

MEDIUM 48

FreePBX is an open source IP PBX.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0038 Published 2026-08-13 Fixed in 16.0.11, 17.0.4 CWE-89

TI-2026-34092 CVE-2026-46376

FreePBX: Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface

MEDIUM 48

FreePBX is an open source IP PBX.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00425 Published 2026-05-29 Fixed in 16.0.45, 17.0.7 CWE-798

TI-2025-36693 CVE-2025-59051

FreePBX Endpoint Manager command injection via Network Scanning feature

MEDIUM 46

The FreePBX Endpoint Manager module includes a Network Scanning feature that provides web-based access to nmap functionality for network device discovery.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00528 Published 2025-10-14 Fixed in 16.0.92, 17.0.6 CWE-78

TI-2020-18824 CVE-2020-36630 · GHSA-cgmg-fw4f-9qc5

FreePBX cdr Cdr.class.php ajaxHandler sql injection

MEDIUM 43

A vulnerability was found in FreePBX cdr 14.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00737 Published 2022-12-25 No fix listed CWE-89

TI-2026-29267 CVE-2026-40520 · GHSA-h2vx-h73q-6q6w

FreePBX api module Command Injection via GraphQL

MEDIUM 42

FreePBX api module version 17.0.8 and prior contain a command injection vulnerability in the initiateGqlAPIProcess() function where GraphQL mutation input fields are passed directly to shell_exec() without sanitization o…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01379 Published 2026-04-21 Fixed CWE-78

TI-2026-52907 CVE-2026-75600

FreePBX: Authenticated API generatedocs Host Command Injection

MEDIUM 41

FreePBX is an open source IP PBX.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00811 Published 2026-09-28 Fixed in 17.0.9 CWE-78

TI-2026-39498 CVE-2026-54675

FreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module

MEDIUM 41

FreePBX is an open source IP PBX.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00657 Published 2026-09-28 Fixed in 16.0.10, 17.0.5 CWE-22

TI-2026-39497 CVE-2026-54674

Authenticated Command Injection in FreePBX UCP Interface

MEDIUM 41

FreePBX is an open source IP PBX.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00879 Published 2026-09-28 Fixed in 16.0.39, 17.0.7 CWE-78

TI-2026-21457 CVE-2026-26978

Free PBX backup: Deserialization of Untrusted Data in admin/modules/backup/Models/BackupSplFileInfo.php

MEDIUM 41

FreePBX is an open source IP PBX.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00896 Published 2026-05-18 Fixed in 16.0.71, 17.0.6 CWE-502

TI-2026-51748 CVE-2026-73664

FreePBX: Authenticated Arbitrary SSH Key Injection via Backup Module

MEDIUM 40

FreePBX is an open source IP PBX.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00507 Published 2026-08-13 Fixed in 17.0.11 CWE-269

TI-2026-50836 CVE-2026-72578 · GHSA-hf49-w8xr-2c35

FreePBX Framework - Missing CSRF Protection in Admin Panel Ajax Dispatcher

MEDIUM 40

A cross-site request forgery (CSRF) vulnerability in FreePBX Framework 17.0 allows an unauthenticated remote attacker to perform administrative actions on behalf of an authenticated administrator.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2026-08-10 No fix listed CWE-352

TI-2026-39525 CVE-2026-54710

FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)

MEDIUM 40

FreePBX is an open source IP PBX.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00512 Published 2026-09-28 Fixed in 16.0.40, 17.0.7 CWE-20

Open these records in search →