Skip to content
OpenAdvisories

Vendor

FreePBX

44 known vulnerabilities.

Products

security-reporting 15 framework 5 endpoint 4 api 3 endpointman 2 tts 2 missedcall 1 music 1 ucp 1 FreePBX 1 contactmanager 1 restapps 1 cdr 1 core 1 arimanager 1 backup 1 voicemail 1 FreePBX Framework 1 filestore 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-73665 Public exploit

    FreePBX UCP: Unauthenticated remote code execution via socket.io namespace auth bypass and AMI action injection

    FreePBX is an open source IP PBX. Prior to 17.0.9, the UCP Node server on ports 8001 and 8003 uses io.use(checkAuth) in node/lib/server.js, but Socket.IO version 4 applies that middleware only to the default namespace. An unauthenticated client can connect to…

    FreePBX ucp
  • Critical 9.3
    CVE-2026-73663 Public exploit

    FreePBX: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover

    FreePBX is an open source IP PBX. From 16.0.0 until 16.0.11 and 17.0.4, the FreePBX missedcall module places the inbound Caller ID name from crafted SIP From headers into the missedcalllog INSERT in agi-bin/missedcallnotify.php without escaping or bound param…

    FreePBX missedcall
  • Critical 9.3
    CVE-2025-66039 Public exploit

    FreePBX Endpoint Manager Allows Unauthenticated Logins to Administrator Control Panel via Forged Basic Auth Header

    FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions are vulnerable to authentication bypass when the authentication type is set to "webserver." When providing an Authorization header with an arbitrary value, a se…

    FreePBX framework
  • High 8.6
    CVE-2025-64328 Exploited Public exploit EPSS 85%

    FreePBX Administration GUI is Vulnerable to Authenticated Command Injection

    FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. In versions 17.0.2.36 and above before 17.0.3, the filestore module within the Administrative interface is vulnerable to a post-authentication command injection by an au…

    FreePBX filestore
    KEV Feb 3, 2026
  • High 8.6
    CVE-2025-61678 Public exploit EPSS 46%

    FreePBX Endpoint Manager vulnerable to authenticated arbitrary file upload via fwbrand parameter

    FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. In versions prior to 16.0.92 for FreePBX 16 and versions prior to 17.0.6 for FreePBX 17, the Endpoint Manager module contains an authenticated arbitrary file upload vuln…

    FreePBX endpointman
  • High 8.6
    CVE-2025-61675 Public exploit EPSS 40%

    FreePBX Endpoint Manager vulnerable to authenticated SQL injection in multiple configuration parameters

    FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. In versions prior to 16.0.92 for FreePBX 16 and versions prior to 17.0.6 for FreePBX 17, the Endpoint Manager module contains authenticated SQL injection vulnerabilities…

    FreePBX endpoint
  • Critical 10.0
    CVE-2025-57819 Exploited Public exploit EPSS 95%

    FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

    FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulatio…

    FreePBX endpoint
    KEV Aug 29, 2025