Security

Topic	Replies	Views	Activity
About the Security category This category contains posts related to security announcements and updates. Please review the FreePBX Security Policy on GitHub before posting here. There is also a FreePBX Security section of the forums.	2	1289	October 24, 2024
:green_circle: Authenticated Administrator Control Panel users can change passwords for any other account security , v17 , v16 , acp	0	58	October 30, 2026
:orange_circle: Unauthenticated Administrator Control Panel login attempts allowed without proper restrictions security , v17 , v16 , acp	0	49	October 30, 2026
:green_circle: Authenticated low-privilege UCP user can modify contacts of other users ucp , contact-manager , security , v17 , v16	7	214	October 31, 2026
:green_circle: Authenticated privilege escalation in API module via SQL injection in Pinsets security , v17 , v16 , graphql	1	72	October 29, 2026
:orange_circle: Authenticated low-privilege UCP user can read full database via SQL injection ucp , security , v17 , v16	1	69	October 29, 2026
:green_circle: Authenticated admin SQL injection via SIPSTATION module siptrunk , security , v17 , acp	1	53	October 29, 2026
:green_circle: Authenticated Root OS Command Injection in Backup GraphQL restoreBackup security , v17 , v16 , graphql , restore-backup	1	53	October 17, 2026
:green_circle: Authenticated Second-Order OS Command Execution in FreePBX Recordings via Dialplan Injection dialplan , security , v17 , v16 , acp	1	60	October 17, 2026
:green_circle: Authenticated RCE in UCP via AMI ucp , framework , security , v17 , v16	1	57	October 17, 2026
:green_circle: Authenticated admin can read any file via call recording report security , v17 , v16 , acp	1	56	October 17, 2026
:orange_circle: Authenticated RCE via unsafe unserialize in backup restore security , v17 , v16 , backup-restore	1	49	October 17, 2026
:orange_circle: Unauthenticated inbound CallerID becomes stored XSS in CEL Reports callerid , security , v17 , v16 , cel	1	59	October 17, 2026
:green_circle: Authenticated but Broken access control in the FreePBX framework GraphQL API framework , security , v17 , v16 , graphql	1	64	September 30, 2026
:green_circle: Authenticated admin with limited privileges can escalate perms via Framework BMO AJAX dispatcher framework , security , v17 , v16	1	55	September 23, 2026
:orange_circle: Authenticated RCE in FindMeFollowMe function of Sangoma Connect security , v17 , v16	1	64	September 23, 2026
:green_circle: Authenticated Backup Metadata Hooks Execution Bypass backup , security , v17 , v16 , backup-restore	1	53	September 23, 2026
:green_circle: Authenticated Backup GraphQL Restore Filename Command Injection backup , security , v17 , v16 , backup-restore	1	56	September 23, 2026
:orange_circle: Unauthenticated RCE via SQL injection in Sangoma Connect RT API login firewall , security , v17 , v16	1	93	September 20, 2026
:orange_circle: Unauthenticated Missing Authorization in FreePBX UCP allows reset/overwrite of any user's dashboard templates ucp , security , v17 , v16	1	84	September 20, 2026
:orange_circle: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover security , v17 , v16 , missedcall	3	159	August 16, 2026
:red_circle: Unauthenticated remote code execution in FreePBX UCP via socket.io namespace auth bypass and AMI action injection ucp , security , v17	4	323	August 16, 2026
:green_circle: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup backup , security , v17 , v16 , backup-restore	1	60	August 15, 2026
:green_circle: Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files moh , security , v17	1	63	August 15, 2026
:green_circle: Authenticated TTS AGI Command Injection Through TTS Name security , v17 , v16 , tts	1	69	August 15, 2026
Authenticated Arbitrary SSH Key Injection via Backup Module backup , v17	1	66	August 8, 2026
Authenticated API generatedocs Host Command Injection v17 , graphql	1	67	August 8, 2026
Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module asterisk , moh , security , v17 , v16	14	355	July 17, 2026
Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module security , v17 , v16 , backup-restore	1	81	July 12, 2026
Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module modules , security , v17 , v16	1	62	July 12, 2026

About the Security category

This category contains posts related to security announcements and updates. Please review the FreePBX Security Policy on GitHub before posting here. There is also a FreePBX Security section of the forums.