AP
Product
api
by FreePBX · last CVE Apr 21, 2026
2
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch

Add api to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-40520
8.8
1%
Apr 21
FreePBX api module Command Injection via GraphQL
Affected: through 17.0.8
CVE-2025-55210
7.5
0%
Feb 12
FreePBX API has a Privilege Escalation Error in GraphQL Allowing Authenticated Users to Access Additional Scopes
Affected: >= 15.0.1alpha1, < 16.0.17; >= 17.0.0, < 17.0.5
Showing 2