Security

Topic	Replies	Views	Activity
About the Security category This category contains posts related to security announcements and updates. Please review the FreePBX Security Policy on GitHub before posting here. There is also a FreePBX Security section of the forums.	2	1258	October 24, 2024
Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module asterisk , moh , security , v17 , v16	6	150	June 13, 2026
Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module security , v17 , v16 , backup-restore	0	41	June 12, 2026
Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module modules , security , v17 , v16	0	32	June 12, 2026
Authenticated Command Injection in FreePBX UCP Interface ucp , security , v17 , v16	0	39	June 12, 2026
Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion) superfecta , security , v17 , v16	0	34	June 12, 2026
Authenticated security issues in cdr and dashboard cdr , dashboard	0	76	May 19, 2026
Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface GHSA-m55x-h47x-v3gx CVE-2026-46376 ucp , security	1	261	May 15, 2026
API module security issues published today - CVE-2026-41410 and CVE-2026-44237 security , v17 , v16 , graphql	2	156	May 12, 2026
Exemplified doubts about CVSS implementations asterisk , core , freepbx , security	18	502	June 9, 2026
Security Advisory: Please Lock Down Your Administrator Access configuration , bug , firewall , freepbx	138	14092	September 18, 2025
Security Advisory: Unauthenticated Denial Of Service bug , freepbx , framework , security	10	620	September 29, 2025
Unable to update challenge :: authorization must be pending letsencrypt	2	2365	August 8, 2022
How can this happen? Unauthorized access again!	50	4017	October 16, 2020
Holistic FreePBX Security: Engineering protection from the Big Bad Wolf	2	2568	May 15, 2026
Critical FreePBX RCE Vulnerability (ALL Versions) CVE-2014-7235	83	44003	November 22, 2014
Limited system information exposure	1	2163	October 31, 2014
IncrediblePBX RCE (FIX AVAILABLE)	4	3395	November 22, 2014
A Quick note on POODLE	0	2025	October 21, 2014
CVE-2014-6271 ShellShock Bash Exploit	65	11675	October 18, 2014
Security Advisory, Updates for Asterisk and FreePBX Distro Available	4	3912	July 9, 2014
Security Vulnerability Notice	22	5403	June 4, 2014
Security Notice	1	1615	June 4, 2014
Security Concerns, 2.11 Updates and Expiring Early Bird Specials	2	1815	June 4, 2014
SECURITY ADVISORY: web services (Aug. 11, 2011)	35	4090	June 4, 2014
Security Concerns with Trixbox	5	2017	June 4, 2014

About the Security category

This category contains posts related to security announcements and updates. Please review the FreePBX Security Policy on GitHub before posting here. There is also a FreePBX Security section of the forums.