Security

Topic	Replies	Views	Activity
About the Security category This category contains posts related to security announcements and updates. Please review the FreePBX Security Policy on GitHub before posting here. There is also a FreePBX Security section of the forums.	2	1280	October 24, 2024
:green_circle: Authenticated low-privilege UCP user can modify contacts of other users ucp , contact-manager , security , v17 , v16	6	167	October 1, 2026
:green_circle: Authenticated privilege escalation in API module via SQL injection in Pinsets security , v17 , v16 , graphql	0	60	September 29, 2026
:orange_circle: Authenticated low-privilege UCP user can read full database via SQL injection ucp , security , v17 , v16	0	56	September 29, 2026
:green_circle: Authenticated admin SQL injection via SIPSTATION module siptrunk , security , v17 , acp	0	44	September 29, 2026
:green_circle: Authenticated Root OS Command Injection in Backup GraphQL restoreBackup security , v17 , v16 , graphql , restore-backup	1	45	October 17, 2026
:green_circle: Authenticated Second-Order OS Command Execution in FreePBX Recordings via Dialplan Injection dialplan , security , v17 , v16 , acp	1	53	October 17, 2026
:green_circle: Authenticated RCE in UCP via AMI ucp , framework , security , v17 , v16	1	50	October 17, 2026
:green_circle: Authenticated admin can read any file via call recording report security , v17 , v16 , acp	1	48	October 17, 2026
:orange_circle: Authenticated RCE via unsafe unserialize in backup restore security , v17 , v16 , backup-restore	1	44	October 17, 2026
:orange_circle: Unauthenticated inbound CallerID becomes stored XSS in CEL Reports callerid , security , v17 , v16 , cel	1	54	October 17, 2026
:green_circle: Authenticated but Broken access control in the FreePBX framework GraphQL API framework , security , v17 , v16 , graphql	1	60	September 30, 2026
:green_circle: Authenticated admin with limited privileges can escalate perms via Framework BMO AJAX dispatcher framework , security , v17 , v16	1	50	September 23, 2026
:orange_circle: Authenticated RCE in FindMeFollowMe function of Sangoma Connect security , v17 , v16	1	57	September 23, 2026
:green_circle: Authenticated Backup Metadata Hooks Execution Bypass backup , security , v17 , v16 , backup-restore	1	47	September 23, 2026
:green_circle: Authenticated Backup GraphQL Restore Filename Command Injection backup , security , v17 , v16 , backup-restore	1	49	September 23, 2026
:orange_circle: Unauthenticated RCE via SQL injection in Sangoma Connect RT API login firewall , security , v17 , v16	1	80	September 20, 2026
:orange_circle: Unauthenticated Missing Authorization in FreePBX UCP allows reset/overwrite of any user's dashboard templates ucp , security , v17 , v16	1	75	September 20, 2026
:orange_circle: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover security , v17 , v16 , missedcall	3	145	August 16, 2026
:red_circle: Unauthenticated remote code execution in FreePBX UCP via socket.io namespace auth bypass and AMI action injection ucp , security , v17	4	268	August 16, 2026
:green_circle: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup backup , security , v17 , v16 , backup-restore	1	57	August 15, 2026
:green_circle: Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files moh , security , v17	1	57	August 15, 2026
:green_circle: Authenticated TTS AGI Command Injection Through TTS Name security , v17 , v16 , tts	1	62	August 15, 2026
Authenticated Arbitrary SSH Key Injection via Backup Module backup , v17	1	60	August 8, 2026
Authenticated API generatedocs Host Command Injection v17 , graphql	1	61	August 8, 2026
Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module asterisk , moh , security , v17 , v16	14	327	July 17, 2026
Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module security , v17 , v16 , backup-restore	1	76	July 12, 2026
Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module modules , security , v17 , v16	1	61	July 12, 2026
Authenticated Command Injection in FreePBX UCP Interface ucp , security , v17 , v16	1	92	July 12, 2026
Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion) superfecta , security , v17 , v16	1	65	July 12, 2026

About the Security category

This category contains posts related to security announcements and updates. Please review the FreePBX Security Policy on GitHub before posting here. There is also a FreePBX Security section of the forums.