|
[SURVEY] Limiting access to Asterisk CLI from the GUI
|
|
6
|
243
|
July 29, 2026
|
|
AI Slop and Security noise
|
|
4
|
211
|
July 23, 2026
|
|
:orange_circle: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover
|
|
2
|
105
|
July 17, 2026
|
|
:red_circle: Unauthenticated remote code execution in FreePBX UCP via socket.io namespace auth bypass and AMI action injection
|
|
3
|
155
|
July 17, 2026
|
|
Asterisk versions updated with asterisk-version-switch
|
|
0
|
62
|
July 16, 2026
|
|
:green_circle: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup
|
|
0
|
43
|
July 16, 2026
|
|
:green_circle: Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files
|
|
0
|
40
|
July 16, 2026
|
|
:green_circle: Authenticated TTS AGI Command Injection Through TTS Name
|
|
0
|
45
|
July 16, 2026
|
|
Expired softphone license changes
|
|
1
|
209
|
July 13, 2026
|
|
Sangoma Silently Breaks S-Series Redirect — Manufacturer Neglect and Planned Obsolescence at Its Finest
|
|
65
|
947
|
July 12, 2026
|
|
Certificates - why are they needed and other questions
|
|
3
|
121
|
August 1, 2026
|
|
Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module
|
|
14
|
241
|
July 17, 2026
|
|
Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module
|
|
1
|
59
|
July 12, 2026
|
|
Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module
|
|
1
|
47
|
July 12, 2026
|
|
Authenticated Command Injection in FreePBX UCP Interface
|
|
1
|
73
|
July 12, 2026
|
|
Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)
|
|
1
|
50
|
July 12, 2026
|
|
Qualys Scanner Fail Authentication on FreePBX 17 server
|
|
3
|
94
|
July 12, 2026
|
|
Ucp module - won't upgrade to 17.0.7?
|
|
7
|
126
|
July 12, 2026
|
|
Unscheduled forum maintenance completed
|
|
2
|
51
|
July 5, 2026
|
|
Github Hack
|
|
3
|
139
|
June 27, 2026
|
|
Authenticated security issues in cdr and dashboard
|
|
0
|
89
|
May 19, 2026
|
|
Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface GHSA-m55x-h47x-v3gx CVE-2026-46376
|
|
1
|
325
|
May 15, 2026
|
|
Linux kernel vulnerability (CVE-2026-31431)
|
|
18
|
717
|
June 15, 2026
|
|
API module security issues published today - CVE-2026-41410 and CVE-2026-44237
|
|
2
|
170
|
May 12, 2026
|
|
Exemplified doubts about CVSS implementations
|
|
18
|
599
|
June 9, 2026
|
|
Watch what we do with security fixes 👀
|
|
9
|
407
|
October 11, 2025
|
|
Security Advisory: Unauthenticated Denial Of Service
|
|
10
|
638
|
September 29, 2025
|
|
Fraud Detection in FreePBX Billing – What’s Working for You?
|
|
1
|
115
|
October 2, 2025
|
|
MFA Free For All - License Limits
|
|
8
|
365
|
June 13, 2025
|
|
Is there way to make FreePBX secure without Firewall module?
|
|
5
|
207
|
June 29, 2025
|