Skip to content
OpenAdvisories

Vendor

fusionpbx

2 known vulnerabilities.

Products

fusionpbx 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-108161

    FusionPBX through 5.6.5 OS Command Injection via Caller ID in Recording ZIP Download

    FusionPBX through 5.6.5 contains an OS command injection vulnerability in call_recordings::download() that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values. When the record_name filename template is enabled…

    fusionpbx fusionpbx