Topics tagged security

Topic	Replies	Views	Activity
Critical PHP Security Vulnerabilities: Action Required for FreePBX and PBXact Security security , v17 , v16 , php	6	1595	November 9, 2026
Asterisk updated to 20.21.0, 22.11.0 and 23.5.0 Security asterisk , pjsip , freepbx , ami , security	11	659	November 9, 2026
PHP CVE Patching Security security , v17 , v16 , php	94	7145	November 3, 2026
:green_circle: Authenticated Administrator Control Panel users can change passwords for any other account Security security , v17 , v16 , acp	0	58	October 30, 2026
:orange_circle: Unauthenticated Administrator Control Panel login attempts allowed without proper restrictions Security security , v17 , v16 , acp	0	47	October 30, 2026
Possible SIP Credential Theft - Steps for Firewall Administrators Security siptrunk , firewall , security	0	137	October 28, 2026
:green_circle: Authenticated low-privilege UCP user can modify contacts of other users Security ucp , contact-manager , security , v17 , v16	7	212	October 31, 2026
:green_circle: Authenticated privilege escalation in API module via SQL injection in Pinsets Security security , v17 , v16 , graphql	1	72	October 29, 2026
:orange_circle: Authenticated low-privilege UCP user can read full database via SQL injection Security ucp , security , v17 , v16	1	68	October 29, 2026
:green_circle: Authenticated admin SQL injection via SIPSTATION module Security siptrunk , security , v17 , acp	1	52	October 29, 2026
Virtual Private Question Networking security	10	291	October 28, 2026
:green_circle: Authenticated Root OS Command Injection in Backup GraphQL restoreBackup Security security , v17 , v16 , graphql , restore-backup	1	53	October 17, 2026
:green_circle: Authenticated Second-Order OS Command Execution in FreePBX Recordings via Dialplan Injection Security dialplan , security , v17 , v16 , acp	1	59	October 17, 2026
:green_circle: Authenticated RCE in UCP via AMI Security ucp , framework , security , v17 , v16	1	56	October 17, 2026
:green_circle: Authenticated admin can read any file via call recording report Security security , v17 , v16 , acp	1	55	October 17, 2026
:orange_circle: Authenticated RCE via unsafe unserialize in backup restore Security security , v17 , v16 , backup-restore	1	49	October 17, 2026
:orange_circle: Unauthenticated inbound CallerID becomes stored XSS in CEL Reports Security callerid , security , v17 , v16 , cel	1	58	October 17, 2026
:green_circle: Authenticated but Broken access control in the FreePBX framework GraphQL API Security framework , security , v17 , v16 , graphql	1	63	September 30, 2026
:green_circle: Authenticated admin with limited privileges can escalate perms via Framework BMO AJAX dispatcher Security framework , security , v17 , v16	1	55	September 23, 2026
:orange_circle: Authenticated RCE in FindMeFollowMe function of Sangoma Connect Security security , v17 , v16	1	64	September 23, 2026
:green_circle: Authenticated Backup Metadata Hooks Execution Bypass Security backup , security , v17 , v16 , backup-restore	1	53	September 23, 2026
:green_circle: Authenticated Backup GraphQL Restore Filename Command Injection Security backup , security , v17 , v16 , backup-restore	1	56	September 23, 2026
:orange_circle: Unauthenticated RCE via SQL injection in Sangoma Connect RT API login Security firewall , security , v17 , v16	1	93	September 20, 2026
:orange_circle: Unauthenticated Missing Authorization in FreePBX UCP allows reset/overwrite of any user's dashboard templates Security ucp , security , v17 , v16	1	84	September 20, 2026
Updated security repo README Security freepbx , security , ai	1	79	September 19, 2026
[SURVEY] Limiting access to Asterisk CLI from the GUI Security ami , security , cli , acp , survey	7	292	August 28, 2026
AI Slop and Security noise AI security , ai	5	265	August 22, 2026
:orange_circle: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover Security security , v17 , v16 , missedcall	3	158	August 16, 2026
:red_circle: Unauthenticated remote code execution in FreePBX UCP via socket.io namespace auth bypass and AMI action injection Security ucp , security , v17	4	314	August 16, 2026
Asterisk versions updated with asterisk-version-switch Security asterisk , freepbx , security	1	129	August 15, 2026