freepbx
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 36 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 24, 2007 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →FreePBX: Authenticated Access can lead to Subsequent OAuth2 Authentication Bypass in API Module
Free PBX backup: Deserialization of Untrusted Data in admin/modules/backup/Models/BackupSplFileInfo.php
FreePBX api module Command Injection via GraphQL
FreePBX: Authenticated Remote Code Execution via Recordings Module AJAX Endpoints
FreePBX: Authenticated SQL Injection Vulnerabilities in FreePBX Logfiles Module
FreePBX: Authenticated SQL Injection in CDR (Call Data Record) Reports
FreePBX: Command Injection leading to Remote Code Execution in FreePBX ElevenLabs Text-to-Speech integration
FreePBX API has a Privilege Escalation Error in GraphQL Allowing Authenticated Users to Access Additional Scopes
Authenticated SQL Injection in FreePBX tts (Text To Speech) module
Authenticated amportal search for ‘freepbx_engine’ in non root writeable directories leads to potential privilege escalation
Monitor freepbx in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.