Sangoma

Records98All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical21CVSS 9.0–10.0

CVSS high41CVSS 7.0–8.9

Exploited now

Sangoma records in CISA KEV

TI-2026-08422 Sangoma Switchvox SQL Injection Vulnerability CRITICAL 99KEV 2026-09-02 TI-2019-13698 Sangoma FreePBX Improper Authentication Vulnerability CRITICAL 100KEV 2026-02-03 TI-2025-39763 Sangoma FreePBX OS Command Injection Vulnerability CRITICAL 96KEV 2026-02-03 TI-2025-35702 Sangoma FreePBX Authentication Bypass Vulnerability CRITICAL 100KEV 2025-08-29

Components

Products in the NVD configurations · select one to filter the records

Freepbx 50 records CRITICAL Asterisk 28 records HIGH Certified Asterisk 15 records HIGH Restapps 2 records MEDIUM Session Border Controller Firmware 2 records MEDIUM Switchvox 2 records CRITICAL Voicemail 2 records LOW Filestore 1 record CRITICAL

Records

50 records in Freepbx · all components

TI-2025-35702 CVE-2025-57819

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

CRITICAL 100KEV

FreePBX is an open-source web-based graphical user interface.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.95213 Published 2025-08-28 Fixed in 15.0.66, 16.0.89 +1 CWE-288

TI-2019-13698 CVE-2019-19006 · GHSA-85h5-chmw-697j

Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control.

CRITICAL 100KEV

Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.54663 Published 2019-11-21 No fix listed CWE-287

TI-2024-38391 CVE-2024-58294 · GHSA-3f55-6gfh-8xfx

FreePBX 16 Authenticated Remote Code Execution via API Module

HIGH 73

FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.03568 Published 2025-12-11 No fix listed CWE-78

TI-2023-23197 CVE-2023-43336 · GHSA-3g8h-47mp-4839

Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was…

HIGH 73

Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to contain an access control issue via a modified parameter value, e.g., changing extension=self to extension=101.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00866 Published 2023-11-02 No fix listed CWE-284

TI-2014-06023 CVE-2014-7235 · GHSA-7pc8-wp58-mr3p

htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface…

HIGH 72

htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface (ARI) in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.1.5 allows remote attackers to execute arbitrary code via the ari_auth…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.43895 Published 2014-10-07 No fix listed CWE-94

TI-2025-36981 CVE-2025-59429

FreePBX core module vulnerable to reflected cross-site scripting via Asterisk HTTP Status page

HIGH 70

FreePBX is an open source GUI for managing Asterisk.

CVSS 4.0HIGH 8.5 Network Low privileges User interaction EPSS 0.00198 Published 2025-10-14 Fixed in 16.0.68.39, 17.0.18.38 CWE-79

TI-2012-04113 CVE-2012-4869 · GHSA-vmpf-f73j-fg6v

The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10…

HIGH 70

The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attackers to execute arbitrary commands via the callmenum parameter in a c action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.70252 Published 2012-09-06 No fix listed CWE-94

TI-2014-01484 CVE-2014-1903 · GHSA-xvg7-pm76-82w3

admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15…

HIGH 65

admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 before 2.11.0.23, and 12 before 12.0.1alpha22 does not restrict the set of functions accessible to the API handler, which all…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.5181 Published 2014-02-18 No fix listed CWE-264

TI-2025-40565 CVE-2025-66039

FreePBX Endpoint Manager Allows Unauthenticated Logins to Administrator Control Panel via Forged Basic Auth Header

MEDIUM 54

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03391 Published 2025-12-09 Fixed in 16.0.44, 17.0.23 CWE-287

TI-2026-22594 CVE-2026-28287

FreePBX: Authenticated Remote Code Execution via Recordings Module AJAX Endpoints

MEDIUM 51

FreePBX is an open source IP PBX.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.09284 Published 2026-03-05 Fixed in 16.0.20, 17.0.5 CWE-78

TI-2025-41432 CVE-2025-67736

Authenticated SQL Injection in FreePBX tts (Text To Speech) module

MEDIUM 49

The FreePBX module tts (Text to Speech) for FreePBX, an open-source web-based graphical user interface (GUI) that manages Asterisk.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.06434 Published 2025-12-16 Fixed in 16.0.5, 17.0.5 CWE-89

TI-2026-51749 CVE-2026-73665

FreePBX UCP: Unauthenticated remote code execution via socket.io namespace auth bypass and AMI action injection

MEDIUM 48

FreePBX is an open source IP PBX.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00331 Published 2026-08-13 Fixed in 17.0.9 CWE-862

TI-2026-51747 CVE-2026-73663

FreePBX: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover

MEDIUM 48

FreePBX is an open source IP PBX.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0038 Published 2026-08-13 Fixed in 16.0.11, 17.0.4 CWE-89

TI-2026-34092 CVE-2026-46376

FreePBX: Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface

MEDIUM 48

FreePBX is an open source IP PBX.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00425 Published 2026-05-29 Fixed in 16.0.45, 17.0.7 CWE-798

TI-2020-18824 CVE-2020-36630 · GHSA-cgmg-fw4f-9qc5

FreePBX cdr Cdr.class.php ajaxHandler sql injection

MEDIUM 43

A vulnerability was found in FreePBX cdr 14.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00737 Published 2022-12-25 No fix listed CWE-89

TI-2026-52907 CVE-2026-75600

FreePBX: Authenticated API generatedocs Host Command Injection

MEDIUM 41

FreePBX is an open source IP PBX.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00811 Published 2026-09-28 Fixed in 17.0.9 CWE-78

TI-2026-39498 CVE-2026-54675

FreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module

MEDIUM 41

FreePBX is an open source IP PBX.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00657 Published 2026-09-28 Fixed in 16.0.10, 17.0.5 CWE-22

TI-2026-39497 CVE-2026-54674

Authenticated Command Injection in FreePBX UCP Interface

MEDIUM 41

FreePBX is an open source IP PBX.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00879 Published 2026-09-28 Fixed in 16.0.39, 17.0.7 CWE-78

TI-2010-03320 CVE-2010-3490 · GHSA-wrmq-cw6w-55hx

Directory traversal vulnerability in page.recordings.php in the System Recordings…

MEDIUM 41

Directory traversal vulnerability in page.recordings.php in the System Recordings component in the configuration interface in FreePBX 2.8.0 and earlier allows remote authenticated administrators to create arbitrary files…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.09388 Published 2010-09-28 No fix listed CWE-22

TI-2026-39525 CVE-2026-54710

FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)

MEDIUM 40

FreePBX is an open source IP PBX.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00512 Published 2026-09-28 Fixed in 16.0.40, 17.0.7 CWE-20

TI-2026-39524 CVE-2026-54708

Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module

MEDIUM 40

FreePBX is an open source IP PBX.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00526 Published 2026-09-28 Fixed in 16.0.72, 17.0.7 CWE-22

TI-2026-32214 CVE-2026-44237

FreePBX: Authenticated Access can lead to Subsequent OAuth2 Authentication Bypass in API Module

MEDIUM 40

FreePBX is an open source IP PBX.

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.02702 Published 2026-05-29 Fixed in 17.0.8 CWE-1390

TI-2026-32215 CVE-2026-44238

FreePBX: Authenticated SQL Injection via ORDER BY in CDR Reports

LOW 39

FreePBX is an open source IP PBX.

CVSS 4.0HIGH 8.5 Network High privileges No interaction EPSS 0.00289 Published 2026-05-29 Fixed in 16.0.50, 17.0.11 CWE-89

TI-2026-22592 CVE-2026-28284

FreePBX: Authenticated SQL Injection Vulnerabilities in FreePBX Logfiles Module

LOW 39

FreePBX is an open source IP PBX.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00288 Published 2026-03-05 Fixed in 16.0.10, 17.0.5 CWE-89

TI-2026-22545 CVE-2026-28210

FreePBX: Authenticated SQL Injection in CDR (Call Data Record) Reports

LOW 39

FreePBX is an open source IP PBX.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00347 Published 2026-03-05 Fixed in 16.0.49, 17.0.7 CWE-89

Open these records in search →