FreePBX
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 39 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 24, 2007 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →FreePBX UCP: Unauthenticated remote code execution via socket.io namespace auth bypass and AMI action injection
FreePBX: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover
Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files
FreePBX: Authenticated Access can lead to Subsequent OAuth2 Authentication Bypass in API Module
Free PBX backup: Deserialization of Untrusted Data in admin/modules/backup/Models/BackupSplFileInfo.php
FreePBX api module Command Injection via GraphQL
FreePBX: Authenticated Remote Code Execution via Recordings Module AJAX Endpoints
FreePBX: Authenticated SQL Injection Vulnerabilities in FreePBX Logfiles Module
FreePBX: Authenticated SQL Injection in CDR (Call Data Record) Reports
FreePBX: Command Injection leading to Remote Code Execution in FreePBX ElevenLabs Text-to-Speech integration
Monitor FreePBX in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.