|
[SURVEY] Limiting access to Asterisk CLI from the GUI
|
|
6
|
248
|
July 29, 2026
|
|
AI Slop and Security noise
|
|
4
|
217
|
July 23, 2026
|
|
:orange_circle: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover
|
|
3
|
114
|
August 16, 2026
|
|
:red_circle: Unauthenticated remote code execution in FreePBX UCP via socket.io namespace auth bypass and AMI action injection
|
|
4
|
169
|
August 16, 2026
|
|
Asterisk versions updated with asterisk-version-switch
|
|
1
|
68
|
August 15, 2026
|
|
:green_circle: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup
|
|
1
|
45
|
August 15, 2026
|
|
:green_circle: Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files
|
|
1
|
43
|
August 15, 2026
|
|
:green_circle: Authenticated TTS AGI Command Injection Through TTS Name
|
|
1
|
50
|
August 15, 2026
|
|
Expired softphone license changes
|
|
2
|
233
|
August 12, 2026
|
|
Sangoma Silently Breaks S-Series Redirect — Manufacturer Neglect and Planned Obsolescence at Its Finest
|
|
66
|
960
|
August 12, 2026
|
|
Certificates - why are they needed and other questions
|
|
3
|
123
|
August 1, 2026
|
|
Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module
|
|
14
|
245
|
July 17, 2026
|
|
Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module
|
|
1
|
61
|
July 12, 2026
|
|
Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module
|
|
1
|
48
|
July 12, 2026
|
|
Authenticated Command Injection in FreePBX UCP Interface
|
|
1
|
73
|
July 12, 2026
|
|
Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)
|
|
1
|
50
|
July 12, 2026
|
|
Qualys Scanner Fail Authentication on FreePBX 17 server
|
|
3
|
96
|
July 12, 2026
|
|
Ucp module - won't upgrade to 17.0.7?
|
|
7
|
127
|
July 12, 2026
|
|
Unscheduled forum maintenance completed
|
|
2
|
51
|
July 5, 2026
|
|
Github Hack
|
|
3
|
140
|
June 27, 2026
|
|
Authenticated security issues in cdr and dashboard
|
|
0
|
91
|
May 19, 2026
|
|
Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface GHSA-m55x-h47x-v3gx CVE-2026-46376
|
|
1
|
329
|
May 15, 2026
|
|
Linux kernel vulnerability (CVE-2026-31431)
|
|
18
|
739
|
June 15, 2026
|
|
API module security issues published today - CVE-2026-41410 and CVE-2026-44237
|
|
2
|
171
|
May 12, 2026
|
|
Exemplified doubts about CVSS implementations
|
|
18
|
614
|
June 9, 2026
|
|
Watch what we do with security fixes 👀
|
|
9
|
412
|
October 11, 2025
|
|
Security Advisory: Unauthenticated Denial Of Service
|
|
10
|
646
|
September 29, 2025
|
|
Fraud Detection in FreePBX Billing – What’s Working for You?
|
|
1
|
115
|
October 2, 2025
|
|
MFA Free For All - License Limits
|
|
8
|
367
|
June 13, 2025
|
|
Is there way to make FreePBX secure without Firewall module?
|
|
5
|
210
|
June 29, 2025
|