Skip to content
OpenAdvisories

Vendor

FreePBX

44 known vulnerabilities.

Products

security-reporting 15 framework 5 endpoint 4 api 3 endpointman 2 tts 2 missedcall 1 music 1 ucp 1 FreePBX 1 contactmanager 1 restapps 1 cdr 1 core 1 arimanager 1 backup 1 voicemail 1 FreePBX Framework 1 filestore 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.7
    CVE-2025-67722

    Authenticated amportal search for ‘freepbx_engine’ in non root writeable directories leads to potential privilege escalation

    FreePBX is an open-source web-based graphical user interface (GUI) that manages Asterisk. Prior to versions 16.0.45 and 17.0.24 of the FreePBX framework, an authenticated local privilege escalation exists in the deprecated FreePBX startup script `amportal`. I…

    FreePBX framework
  • Medium 6.9
    CVE-2025-67513

    FreePBX Endpoint Manager's Weak Default Password Allows Unauthenticated Access in Endpoint Module REST API

    FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app…

    FreePBX endpoint
  • Medium 6.6
    CVE-2025-59056

    FreePBX vulnerable to unauthenticated Denial of Service

    FreePBX is an open-source web-based graphical user interface. In FreePBX 15, 16, and 17, malicious connections to the Administrator Control Panel web interface can cause the uninstall function to be triggered for certain modules. This function drops the modul…

    FreePBX framework
  • Medium 6.3
    CVE-2025-55211

    FreePBX Post-Authenticated Command Injection

    FreePBX is an open-source web-based graphical user interface. From 17.0.19.11 to before 17.0.21, authenticated users of the Administrator Control Panel (ACP) can run arbitrary shell commands by maliciously changing languages of the framework module. This vuln…

    FreePBX framework
  • Medium 5.1
    CVE-2025-55739

    api: Shared OAuth Signing Key Between Different Instances

    api is a module for FreePBX@, which is an open source GUI that controls and manages Asterisk© (PBX). In versions lower than 15.0.13, 16.0.2 through 16.0.14, 17.0.1 and 17.0.2, there is an identical OAuth private key used across multiple systems that installed…

    FreePBX api
  • Medium 5.1
    CVE-2025-55209

    FreePBX UCP is Vulnerable to Stored XSS Through its User Control Panel

    contactmanager is a module for FreePBX@, which is an open source GUI that controls and manages Asterisk© (PBX). In versions 15.0.14 and below, 16.0.0 through 16.0.26.4 and 17.0.0 through 17.0.5, a stored cross-site scripting (XSS) vulnerability in FreePBX all…

    FreePBX contactmanager
  • Medium 6.8
    CVE-2024-47071

    OSS Endpoint Manager allows unauthorized access to read system files

    OSS Endpoint Manager is an endpoint manager module for FreePBX. OSS Endpoint Manager module activation can allow authenticated web users unauthorized access to read system files with the permissions of the webserver process. This vulnerability is fixed in 14.…

    FreePBX endpointman
  • Medium 5.5
    CVE-2020-36630

    FreePBX cdr Cdr.class.php ajaxHandler sql injection

    A vulnerability was found in FreePBX cdr 14.0. It has been classified as critical. This affects the function ajaxHandler of the file ucp/Cdr.class.php. The manipulation of the argument limit/offset leads to sql injection. Upgrading to version 14.0.5.21 is abl…

    FreePBX cdr