Skip to content
OpenAdvisories

Product · FreePBX

music

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-73662

    Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files

    FreePBX is an open source IP PBX. From 17.0.1 until 17.0.7, the FreePBX Music on Hold module permits dangerous command-line options for /usr/bin/mpg123 and other allowed players in validateCustomConfiguration() in Music.class.php. An authenticated administrat…

    FreePBX music