|
:green_circle: Authenticated but Broken access control in the FreePBX framework GraphQL API
|
|
0
|
46
|
August 31, 2026
|
|
:green_circle: Authenticated admin with limited privileges can escalate perms via Framework BMO AJAX dispatcher
|
|
0
|
41
|
August 24, 2026
|
|
:orange_circle: Authenticated RCE in FindMeFollowMe function of Sangoma Connect
|
|
0
|
44
|
August 24, 2026
|
|
:green_circle: Authenticated Backup Metadata Hooks Execution Bypass
|
|
0
|
36
|
August 24, 2026
|
|
:green_circle: Authenticated Backup GraphQL Restore Filename Command Injection
|
|
0
|
39
|
August 24, 2026
|
|
:orange_circle: Unauthenticated RCE via SQL injection in Sangoma Connect RT API login
|
|
0
|
66
|
August 21, 2026
|
|
:orange_circle: Unauthenticated Missing Authorization in FreePBX UCP allows reset/overwrite of any user's dashboard templates
|
|
0
|
60
|
August 21, 2026
|
|
Updated security repo README
|
|
0
|
58
|
August 20, 2026
|
|
[SURVEY] Limiting access to Asterisk CLI from the GUI
|
|
7
|
265
|
August 28, 2026
|
|
AI Slop and Security noise
|
|
5
|
233
|
August 22, 2026
|
|
:orange_circle: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover
|
|
3
|
133
|
August 16, 2026
|
|
:red_circle: Unauthenticated remote code execution in FreePBX UCP via socket.io namespace auth bypass and AMI action injection
|
|
4
|
204
|
August 16, 2026
|
|
Asterisk versions updated with asterisk-version-switch
|
|
1
|
77
|
August 15, 2026
|
|
:green_circle: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup
|
|
1
|
52
|
August 15, 2026
|
|
:green_circle: Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files
|
|
1
|
52
|
August 15, 2026
|
|
:green_circle: Authenticated TTS AGI Command Injection Through TTS Name
|
|
1
|
54
|
August 15, 2026
|
|
Expired softphone license changes
|
|
2
|
296
|
August 12, 2026
|
|
Sangoma Silently Breaks S-Series Redirect — Manufacturer Neglect and Planned Obsolescence at Its Finest
|
|
66
|
1068
|
August 12, 2026
|
|
Certificates - why are they needed and other questions
|
|
3
|
129
|
August 1, 2026
|
|
Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module
|
|
14
|
287
|
July 17, 2026
|
|
Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module
|
|
1
|
68
|
July 12, 2026
|
|
Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module
|
|
1
|
51
|
July 12, 2026
|
|
Authenticated Command Injection in FreePBX UCP Interface
|
|
1
|
81
|
July 12, 2026
|
|
Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)
|
|
1
|
55
|
July 12, 2026
|
|
Qualys Scanner Fail Authentication on FreePBX 17 server
|
|
3
|
99
|
July 12, 2026
|
|
Ucp module - won't upgrade to 17.0.7?
|
|
7
|
155
|
July 12, 2026
|
|
Unscheduled forum maintenance completed
|
|
2
|
52
|
July 5, 2026
|
|
Github Hack
|
|
3
|
145
|
June 27, 2026
|
|
Authenticated security issues in cdr and dashboard
|
|
0
|
93
|
May 19, 2026
|
|
Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface GHSA-m55x-h47x-v3gx CVE-2026-46376
|
|
1
|
342
|
May 15, 2026
|