Where
-Infinity
0

Trending

Last week
Last month
Last year

Sangoma FreePBX Authenticated SQL Injection in FreePBX tts (Text To Speech) module

Risk 72
Severity
8.6
First published (updated )
CVE-2025-67736

Sangoma FreePBX Authenticated amportal search for ‘freepbx_engine’ in non root writeable directories leads to potential privilege escalation

Risk 69
Severity
7.8
First published (updated )
CVE-2025-67722

FreePBX FreePBX 16FreePBX 16 Authenticated Remote Code Execution via API Module

Risk 79
Severity
8.8
First published (updated )
CVE-2024-58294

Sangoma FreePBX FreePBX core module vulnerable to reflected cross-site scripting via Asterisk HTTP Status page

Risk 78
Severity
8.5
First published (updated )
CVE-2025-59429

Sangoma FreePBX FreePBX vulnerable to unauthenticated Denial of Service

Risk 43
Severity
7.5
First published (updated )
CVE-2025-59056
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

FreePBX FreePBXFreePBX Post-Authenticated Command Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2025-55211

Sangoma FreePBX Sangoma FreePBX Authentication Bypass Vulnerability

Risk 100
Severity
10
Exploited
First published (updated )
CVE-2025-57819

FreePBX FreePBXMalicious File Upload

Risk 66
Severity
7.2
First published (updated )
CVE-2024-53564

Sangoma FreePBX Sangoma FreePBX 1805 through 2203 on Linux contains hardcoded credentials for the Asterisk REST Inte…

Risk 64
Severity
8.6
First published (updated )
CVE-2023-26566

Sangoma FreePBX Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to con…

Risk 79
Severity
8.8
First published (updated )
CVE-2023-43336
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Sangoma FreePBX FreePBX arimanager Views cross site scripting

Risk 38
Severity
6.1
First published (updated )
CVE-2019-25090

Sangoma FreePBX FreePBX cdr Cdr.class.php ajaxHandler sql injection

Risk 86
Severity
9.8
First published (updated )
CVE-2020-36630

Sangoma restappsFreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is in…

Risk 86
Severity
9.8
First published (updated )
CVE-2021-45461

Sangoma restappsCommand Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2020-10666

Sangoma FreePBX XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2019-19852
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Sangoma FreePBX In Sangoma FreePBX 13 through 15 and sysadmin (aka System Admin) 13.0.92 through 15.0.13.6 modules h…

Risk 66
Severity
7.2
First published (updated )
CVE-2019-19538

Sangoma FreePBX XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2019-19851

Sangoma FreePBX XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2019-19551

Sangoma FreePBX XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2019-19552

Sangoma FreePBX Sangoma FreePBX Improper Authentication Vulnerability

Risk 99
Severity
9.8
Exploited
First published (updated )
CVE-2019-19006
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

FreePBX ManagerXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2019-16967

Sangoma FreePBX XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2018-15891

Sangoma FreePBX SQL Injection, Input Validation

Risk 66
Severity
7.2
First published (updated )
CVE-2018-6393

FreePBX FreePBXadmin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 befor…

Risk 52
Severity
7.5
First published (updated )
CVE-2014-1903

Sangoma FreePBX Code Injection

Risk 52
Severity
7.5
First published (updated )
CVE-2012-4869
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Sangoma FreePBX XSS

Risk 22
Severity
4.3
First published (updated )
CVE-2012-4870

Sangoma FreePBX Path Traversal

Risk 46
Severity
6.5
First published (updated )
CVE-2010-3490

FreePBX FreePBXXSS

Risk 22
Severity
4.3
First published (updated )
CVE-2009-1801

FreePBX FreePBXInfoleak

Risk 26
Severity
5
First published (updated )
CVE-2009-1803

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203