Where
-Infinity
0

Trending

Last week
Last month
Last year

FreePBX FreePBXFree PBX backup: Deserialization of Untrusted Data in admin/modules/backup/Models/BackupSplFileInfo.php

Risk 62
Severity
8.6
First published (updated )
CVE-2026-26978

Sangoma FreePBXFreePBX: Authenticated Remote Code Execution via Recordings Module AJAX Endpoints

Risk 56
Severity
8.8
EPSS
0.12%
First published (updated )
CVE-2026-28287

Sangoma FreePBXFreePBX: Authenticated SQL Injection Vulnerabilities in FreePBX Logfiles Module

Risk 56
Severity
8.8
EPSS
0.03%
First published (updated )
CVE-2026-28284

Sangoma FreePBXFreePBX: Authenticated SQL Injection in CDR (Call Data Record) Reports

Risk 56
Severity
8.8
EPSS
0.05%
First published (updated )
CVE-2026-28210

Sangoma FreePBXFreePBX: Command Injection leading to Remote Code Execution in FreePBX ElevenLabs Text-to-Speech integration

Risk 49
Severity
7.5
EPSS
0.11%
First published (updated )
CVE-2026-28209
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Sangoma FreePBXFreePBX API has a Privilege Escalation Error in GraphQL Allowing Authenticated Users to Access Additional Scopes

Risk 70
Severity
7.5
First published (updated )
CVE-2025-55210

Sangoma FreePBX Authenticated SQL Injection in FreePBX tts (Text To Speech) module

Risk 72
Severity
8.6
First published (updated )
CVE-2025-67736

Sangoma FreePBX Authenticated amportal search for ‘freepbx_engine’ in non root writeable directories leads to potential privilege escalation

Risk 69
Severity
7.8
First published (updated )
CVE-2025-67722

Sangoma FreePBX FreePBX vulnerable to unauthenticated Denial of Service

Risk 43
Severity
7.5
First published (updated )
CVE-2025-59056

FreePBX FreePBXFreePBX Post-Authenticated Command Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2025-55211
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

FreePBX FreePBXapi: Shared OAuth Signing Key Between Different Instances

Risk 40
Severity
5.1
First published (updated )
CVE-2025-55739

FreePBX FreePBXFreePBX UCP is Vulnerable to Stored XSS Through its User Control Panel

Risk 40
Severity
5.1
First published (updated )
CVE-2025-55209

Sangoma FreePBX Sangoma FreePBX Authentication Bypass Vulnerability

Risk 100
Severity
10
Exploited
First published (updated )
CVE-2025-57819

FreePBX FreePBXMalicious File Upload

Risk 66
Severity
7.2
First published (updated )
CVE-2024-53564

Sangoma FreePBX XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2018-15891
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

FreePBX FreePBXCode Injection

Risk 87
Severity
10
First published (updated )
CVE-2014-7235

FreePBX FreePBXadmin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 befor…

Risk 52
Severity
7.5
First published (updated )
CVE-2014-1903

FreePBX FreePBXXSS

Risk 22
Severity
4.3
First published (updated )
CVE-2009-1801

FreePBX FreePBXInfoleak

Risk 26
Severity
5
First published (updated )
CVE-2009-1803

FreePBX FreePBXCSRF

Risk 47
Severity
6.8
First published (updated )
CVE-2009-1802
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

FreePBX FreePBXadmin/config.php in the music-on-hold module in freePBX 2.2.x allows remote authenticated administra…

Risk 46
Severity
6.5
First published (updated )
CVE-2007-2350

FreePBX FreePBXXSS

Risk 47
Severity
6.8
First published (updated )
CVE-2007-2191

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203