FR
Product
FreePBX
by Sangoma · last CVE Sep 28, 2026
On CISA KEVExploited in the wild
51
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 25Medium 11Low 0
Watch

Add FreePBX to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2009-1801
–
1%
May 28
Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote attackers to inject arbitrary web script…
Affected: 2.4.0; 2.5.0
Page 2 of 2 · 51 total