Skip to content
OpenAdvisories

Product · FreePBX

framework

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.7
    CVE-2025-67722

    Authenticated amportal search for ‘freepbx_engine’ in non root writeable directories leads to potential privilege escalation

    FreePBX is an open-source web-based graphical user interface (GUI) that manages Asterisk. Prior to versions 16.0.45 and 17.0.24 of the FreePBX framework, an authenticated local privilege escalation exists in the deprecated FreePBX startup script `amportal`. I…

    FreePBX framework
  • Medium 6.6
    CVE-2025-59056

    FreePBX vulnerable to unauthenticated Denial of Service

    FreePBX is an open-source web-based graphical user interface. In FreePBX 15, 16, and 17, malicious connections to the Administrator Control Panel web interface can cause the uninstall function to be triggered for certain modules. This function drops the modul…

    FreePBX framework
  • Medium 6.3
    CVE-2025-55211

    FreePBX Post-Authenticated Command Injection

    FreePBX is an open-source web-based graphical user interface. From 17.0.19.11 to before 17.0.21, authenticated users of the Administrator Control Panel (ACP) can run arbitrary shell commands by maliciously changing languages of the framework module. This vuln…

    FreePBX framework