Watch what we do with security fixes 👀

[penguinpbx (C. Maj)]

That post was replied to in that topic about 12 hours later:

Security Advisory: Unauthenticated Denial Of Service

There were two CVEs addressed on September 15th – both in the “framework” module. The fixed “framework” modules started shipping from the FreePBX mirrors at appx. 2025-09-15T07:40:00Z (UTC). The CVEs were publicly published on GitHub about 12 hours later. The post-Authentication command injection issue in “framework” GHSA-xg83-m6q5-q24h CVE-2025-55211 was opened in May. This only affected some recent versions of FreePBX 17 (installed over the past year.) The Unauthenticated denial of service…

Happy to address any further concerns you may have about that topic in that topic.