Topics tagged security

Topic	Replies	Views	Activity
PHP CVE Patching Security security , v17 , v16	25	411	October 22, 2026
Asterisk updated to 20.21.0, 22.11.0 and 23.5.0 Security asterisk , pjsip , freepbx , ami , security	6	336	October 8, 2026
:green_circle: Authenticated low-privilege UCP user can modify contacts of other users Security ucp , contact-manager , security , v17 , v16	6	167	October 1, 2026
:green_circle: Authenticated privilege escalation in API module via SQL injection in Pinsets Security security , v17 , v16 , graphql	0	59	September 29, 2026
:orange_circle: Authenticated low-privilege UCP user can read full database via SQL injection Security ucp , security , v17 , v16	0	54	September 29, 2026
:green_circle: Authenticated admin SQL injection via SIPSTATION module Security siptrunk , security , v17 , acp	0	43	September 29, 2026
Virtual Private Question Networking security	9	259	September 27, 2026
:green_circle: Authenticated Root OS Command Injection in Backup GraphQL restoreBackup Security security , v17 , v16 , graphql , restore-backup	1	44	October 17, 2026
:green_circle: Authenticated Second-Order OS Command Execution in FreePBX Recordings via Dialplan Injection Security dialplan , security , v17 , v16 , acp	1	53	October 17, 2026
:green_circle: Authenticated RCE in UCP via AMI Security ucp , framework , security , v17 , v16	1	49	October 17, 2026
:green_circle: Authenticated admin can read any file via call recording report Security security , v17 , v16 , acp	1	48	October 17, 2026
:orange_circle: Authenticated RCE via unsafe unserialize in backup restore Security security , v17 , v16 , backup-restore	1	44	October 17, 2026
:orange_circle: Unauthenticated inbound CallerID becomes stored XSS in CEL Reports Security callerid , security , v17 , v16 , cel	1	54	October 17, 2026
:green_circle: Authenticated but Broken access control in the FreePBX framework GraphQL API Security framework , security , v17 , v16 , graphql	1	60	September 30, 2026
:green_circle: Authenticated admin with limited privileges can escalate perms via Framework BMO AJAX dispatcher Security framework , security , v17 , v16	1	50	September 23, 2026
:orange_circle: Authenticated RCE in FindMeFollowMe function of Sangoma Connect Security security , v17 , v16	1	57	September 23, 2026
:green_circle: Authenticated Backup Metadata Hooks Execution Bypass Security backup , security , v17 , v16 , backup-restore	1	47	September 23, 2026
:green_circle: Authenticated Backup GraphQL Restore Filename Command Injection Security backup , security , v17 , v16 , backup-restore	1	49	September 23, 2026
:orange_circle: Unauthenticated RCE via SQL injection in Sangoma Connect RT API login Security firewall , security , v17 , v16	1	80	September 20, 2026
:orange_circle: Unauthenticated Missing Authorization in FreePBX UCP allows reset/overwrite of any user's dashboard templates Security ucp , security , v17 , v16	1	75	September 20, 2026
Updated security repo README Security freepbx , security , ai	1	77	September 19, 2026
[SURVEY] Limiting access to Asterisk CLI from the GUI Security ami , security , cli , acp , survey	7	282	August 28, 2026
AI Slop and Security noise AI security , ai	5	257	August 22, 2026
:orange_circle: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover Security security , v17 , v16 , missedcall	3	145	August 16, 2026
:red_circle: Unauthenticated remote code execution in FreePBX UCP via socket.io namespace auth bypass and AMI action injection Security ucp , security , v17	4	262	August 16, 2026
Asterisk versions updated with asterisk-version-switch Security asterisk , freepbx , security	1	113	August 15, 2026
:green_circle: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup Security backup , security , v17 , v16 , backup-restore	1	57	August 15, 2026
:green_circle: Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files Security moh , security , v17	1	57	August 15, 2026
:green_circle: Authenticated TTS AGI Command Injection Through TTS Name Security security , v17 , v16 , tts	1	62	August 15, 2026
Expired softphone license changes Sangoma Talk / Software Phone commercialmodules , freepbx , pbxact , security	2	339	August 12, 2026