Security

Topic	Replies	Views	Activity
About the Security category This category contains posts related to security announcements and updates. Please review the FreePBX Security Policy on GitHub before posting here. There is also a FreePBX Security section of the forums.	2	1264	October 24, 2024
:orange_circle: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover security , v17 , v16 , missedcall	2	89	July 17, 2026
:red_circle: Unauthenticated remote code execution in FreePBX UCP via socket.io namespace auth bypass and AMI action injection ucp , security , v17	3	124	July 17, 2026
:green_circle: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup backup , security , v17 , v16 , backup-restore	0	36	July 16, 2026
:green_circle: Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files moh , security , v17	0	32	July 16, 2026
:green_circle: Authenticated TTS AGI Command Injection Through TTS Name security , v17 , v16 , tts	0	39	July 16, 2026
Authenticated Arbitrary SSH Key Injection via Backup Module backup , v17	0	47	July 9, 2026
Authenticated API generatedocs Host Command Injection v17 , graphql	0	41	July 9, 2026
Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module asterisk , moh , security , v17 , v16	14	231	July 17, 2026
Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module security , v17 , v16 , backup-restore	1	54	July 12, 2026
Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module modules , security , v17 , v16	1	43	July 12, 2026
Authenticated Command Injection in FreePBX UCP Interface ucp , security , v17 , v16	1	54	July 12, 2026
Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion) superfecta , security , v17 , v16	1	46	July 12, 2026
Authenticated security issues in cdr and dashboard cdr , dashboard , security	0	85	May 19, 2026
Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface GHSA-m55x-h47x-v3gx CVE-2026-46376 ucp , security	1	314	May 15, 2026
API module security issues published today - CVE-2026-41410 and CVE-2026-44237 security , v17 , v16 , graphql	2	168	May 12, 2026
Exemplified doubts about CVSS implementations asterisk , core , freepbx , security	18	579	June 9, 2026
Security Advisory: Please Lock Down Your Administrator Access configuration , bug , firewall , freepbx	138	14596	September 18, 2025
Security Advisory: Unauthenticated Denial Of Service bug , freepbx , framework , security	10	635	September 29, 2025
Unable to update challenge :: authorization must be pending letsencrypt	2	2376	August 8, 2022
How can this happen? Unauthorized access again!	50	4088	October 16, 2020
Holistic FreePBX Security: Engineering protection from the Big Bad Wolf	2	2573	May 15, 2026
Critical FreePBX RCE Vulnerability (ALL Versions) CVE-2014-7235	83	44081	November 22, 2014
Limited system information exposure	1	2165	October 31, 2014
IncrediblePBX RCE (FIX AVAILABLE)	4	3397	November 22, 2014
A Quick note on POODLE	0	2026	October 21, 2014
CVE-2014-6271 ShellShock Bash Exploit	65	11785	October 18, 2014
Security Advisory, Updates for Asterisk and FreePBX Distro Available	4	3914	July 9, 2014
Security Vulnerability Notice	22	5484	June 4, 2014
Security Notice	1	1619	June 4, 2014

About the Security category

This category contains posts related to security announcements and updates. Please review the FreePBX Security Policy on GitHub before posting here. There is also a FreePBX Security section of the forums.