FR
Product
FreePBX
On CISA KEVExploited in the wild
51
CVEs
3
On KEV
9.8
Max CVSS
6
New 30D
Severity mix
Critical 7High 25Medium 11Low 0
Watch
Add FreePBX to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-64328 In wildKEV | 7.2 | Nov 7 | FreePBX Administration GUI is Vulnerable to Authenticated Command Injection Affected: All versions, or not specified |
| CVE-2026-75600 | 8.8 | Sep 28 | FreePBX: Authenticated API generatedocs Host Command Injection Affected: before 17.0.9 |
| CVE-2026-54710 | 8.8 | Sep 28 | FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion) Affected: 16.0 before 16.0.40; 17.0 before 17.0.7 |
| CVE-2026-54708 | 8.8 | Sep 28 | Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module Affected: 16.0 before 16.0.72; 17.0 before 17.0.7 |
| CVE-2026-54675 | 8.8 | Sep 28 | FreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module Affected: 16.0 before 16.0.10; 17.0 before 17.0.5 |
| CVE-2026-54674 | 8.8 | Sep 28 | Authenticated Command Injection in FreePBX UCP Interface Affected: 16.0 before 16.0.39; 17.0 before 17.0.7 |
| CVE-2026-44238 | 8.8 | May 29 | FreePBX: Authenticated SQL Injection via ORDER BY in CDR Reports Affected: before 16.0.50; 17.0 before 17.0.11 |
| CVE-2026-44239 | 8.8 | May 29 | FreePBX: Authenticated Local File Inclusion in Dashboard Module Affected: before 16.0.22; 17.0 before 17.0.5 |
| CVE-2026-28287 | 8.8 | Mar 5 | FreePBX: Authenticated Remote Code Execution via Recordings Module AJAX Endpoints Affected: 16.0.17.2 before 16.0.20; 17.0.2.4 before 17.0.5 |
| CVE-2026-28284 | 8.8 | Mar 5 | FreePBX: Authenticated SQL Injection Vulnerabilities in FreePBX Logfiles Module Affected: 16.0 before 16.0.10; 17.0 before 17.0.5 |
| CVE-2026-28210 | 8.8 | Mar 5 | FreePBX: Authenticated SQL Injection in CDR (Call Data Record) Reports Affected: 16.0 before 16.0.49; 17.0 before 17.0.7 |
| CVE-2024-58294 | 8.8 | Dec 11 | FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands Affected: 16.0 |
| CVE-2025-55211 | 8.8 | Sep 15 | FreePBX is an open-source web-based graphical user interface Affected: 17.0.19.11 before 17.0.21 |
| CVE-2023-43336 | 8.8 | Nov 2 | Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to contain an access control issue via a modified parameter value, e.g., changing… Affected: before 15.0.16; 16.0.2 before 16.0.17; before 15.0.18; 16.0.2 before 16.0.40 |
| CVE-2026-44237 | 8.1 | May 29 | FreePBX: Authenticated Access can lead to Subsequent OAuth2 Authentication Bypass in API Module Affected: before 17.0.8 |
| CVE-2025-67722 | 7.8 | Dec 16 | FreePBX is an open-source web-based graphical user interface (GUI) that manages Asterisk Affected: 16.0 before 16.0.45; 17.0 before 17.0.24 |
| CVE-2025-55210 | 7.5 | Feb 12 | FreePBX API has a Privilege Escalation Error in GraphQL Allowing Authenticated Users to Access Additional Scopes Affected: 16.0.2 before 16.0.17; 17.0.1 before 17.0.5 |
| CVE-2025-59056 | 7.5 | Sep 15 | FreePBX is an open-source web-based graphical user interface Affected: 15.0 before 15.0.38; 16.0 before 16.0.41; 17.0 before 17.0.21 |
| CVE-2026-45562 | 7.2 | Sep 28 | FreePBX: Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module Affected: 16.0 before 16.0.4; 17.0 before 17.0.6 |
| CVE-2026-73662 | 7.2 | Aug 13 | Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files Affected: 17.0.1 before 17.0.7 |
| CVE-2026-28209 | 7.2 | Mar 5 | FreePBX: Command Injection leading to Remote Code Execution in FreePBX ElevenLabs Text-to-Speech integration Affected: 16.0.17.2 before 16.0.20; 17.0.2.4 before 17.0.5 |
| CVE-2025-67736 | 7.2 | Dec 16 | The FreePBX module tts (Text to Speech) for FreePBX, an open-source web-based graphical user interface (GUI) that manages Asterisk Affected: 16.0 before 16.0.5; 17.0 before 17.0.5 |
| CVE-2024-53564 | 7.2 | Dec 2 | A vulnerability was discovered in FreePBX 17.0.19.17 Affected: 17.0.19.17 |
| CVE-2019-19538 | 7.2 | Mar 16 | In Sangoma FreePBX 13 through 15 and sysadmin (aka System Admin) 13.0.92 through 15.0.13.6 modules have a Remote Command Execution vulnerability that results in Privilege… Affected: before 13.0.92; 14.0.0.0 before 14.0.38.3; 15.0.0.0 before 15.0.13.6 |
| CVE-2018-6393 | 7.2 | Jan 29 | FreePBX 10.13.66-32bit and 14.0.1.24 (SNG7-PBX-64bit-1712-2) allow post-authentication SQL injection via the order parameter Affected: 10.13.66; 14.0.1.24 |
Showing 25