|
[SURVEY] Limiting access to Asterisk CLI from the GUI
As you may know, the cli module parlays raw user input from the FreePBX Administrator Control Panel (ACP) GUI back in to Asterisk via the Asterisk Manager Interface (AMI). This is an extremely powerful feature. So of cou…
|
|
6
|
206
|
July 29, 2026
|
|
Expired softphone license changes
As part of Sangoma FreePBX and PBXact commercial module versioning expiry, dependency and security improvements, we are rolling out more changes in the coming days that may have an impact on your Sangoma soft phone use c…
|
|
1
|
186
|
July 13, 2026
|
|
AI Slop and Security noise
|
|
4
|
188
|
July 23, 2026
|
|
:orange_circle: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover
|
|
2
|
90
|
July 17, 2026
|
|
:red_circle: Unauthenticated remote code execution in FreePBX UCP via socket.io namespace auth bypass and AMI action injection
|
|
3
|
126
|
July 17, 2026
|
|
Asterisk versions updated with asterisk-version-switch
|
|
0
|
56
|
July 16, 2026
|
|
:green_circle: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup
|
|
0
|
36
|
July 16, 2026
|
|
:green_circle: Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files
|
|
0
|
32
|
July 16, 2026
|
|
:green_circle: Authenticated TTS AGI Command Injection Through TTS Name
|
|
0
|
39
|
July 16, 2026
|
|
Sangoma Silently Breaks S-Series Redirect — Manufacturer Neglect and Planned Obsolescence at Its Finest
|
|
65
|
922
|
July 12, 2026
|
|
Certificates - why are they needed and other questions
|
|
2
|
119
|
July 2, 2026
|
|
Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module
|
|
14
|
234
|
July 17, 2026
|
|
Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module
|
|
1
|
55
|
July 12, 2026
|
|
Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module
|
|
1
|
43
|
July 12, 2026
|
|
Authenticated Command Injection in FreePBX UCP Interface
|
|
1
|
54
|
July 12, 2026
|
|
Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)
|
|
1
|
46
|
July 12, 2026
|
|
Qualys Scanner Fail Authentication on FreePBX 17 server
|
|
3
|
91
|
July 12, 2026
|
|
Ucp module - won't upgrade to 17.0.7?
|
|
7
|
120
|
July 12, 2026
|
|
Unscheduled forum maintenance completed
|
|
2
|
51
|
July 5, 2026
|
|
Github Hack
|
|
3
|
137
|
June 27, 2026
|
|
Authenticated security issues in cdr and dashboard
|
|
0
|
85
|
May 19, 2026
|
|
Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface GHSA-m55x-h47x-v3gx CVE-2026-46376
|
|
1
|
315
|
May 15, 2026
|
|
Linux kernel vulnerability (CVE-2026-31431)
|
|
18
|
690
|
June 15, 2026
|
|
API module security issues published today - CVE-2026-41410 and CVE-2026-44237
|
|
2
|
168
|
May 12, 2026
|
|
Exemplified doubts about CVSS implementations
|
|
18
|
579
|
June 9, 2026
|
|
Watch what we do with security fixes 👀
|
|
9
|
406
|
October 11, 2025
|
|
Security Advisory: Unauthenticated Denial Of Service
|
|
10
|
635
|
September 29, 2025
|
|
Fraud Detection in FreePBX Billing – What’s Working for You?
|
|
1
|
114
|
October 2, 2025
|
|
MFA Free For All - License Limits
|
|
8
|
363
|
June 13, 2025
|
|
Is there way to make FreePBX secure without Firewall module?
|
|
5
|
199
|
June 29, 2025
|