Topics tagged security

Topic	Replies	Views	Activity
Asterisk updated to 20.21.0, 22.11.0 and 23.5.0 Security asterisk , pjsip , freepbx , ami , security	6	282	October 8, 2026
:green_circle: Authenticated low-privilege UCP user can modify contacts of other users Security ucp , contact-manager , security , v17 , v16	6	143	October 1, 2026
:green_circle: Authenticated privilege escalation in API module via SQL injection in Pinsets Security security , v17 , v16 , graphql	0	50	September 29, 2026
:orange_circle: Authenticated low-privilege UCP user can read full database via SQL injection Security ucp , security , v17 , v16	0	43	September 29, 2026
:green_circle: Authenticated admin SQL injection via SIPSTATION module Security siptrunk , security , v17 , acp	0	37	September 29, 2026
Virtual Private Question Networking security	9	239	September 27, 2026
:green_circle: Authenticated Root OS Command Injection in Backup GraphQL restoreBackup Security security , v17 , v16 , graphql , restore-backup	0	37	September 17, 2026
:green_circle: Authenticated Second-Order OS Command Execution in FreePBX Recordings via Dialplan Injection Security dialplan , security , v17 , v16 , acp	0	44	September 17, 2026
:green_circle: Authenticated RCE in UCP via AMI Security ucp , framework , security , v17 , v16	0	44	September 17, 2026
:green_circle: Authenticated admin can read any file via call recording report Security security , v17 , v16 , acp	0	41	September 17, 2026
:orange_circle: Authenticated RCE via unsafe unserialize in backup restore Security security , v17 , v16 , backup-restore	0	35	September 17, 2026
:orange_circle: Unauthenticated inbound CallerID becomes stored XSS in CEL Reports Security callerid , security , v17 , v16 , cel	0	47	September 17, 2026
:green_circle: Authenticated but Broken access control in the FreePBX framework GraphQL API Security framework , security , v17 , v16 , graphql	1	59	September 30, 2026
:green_circle: Authenticated admin with limited privileges can escalate perms via Framework BMO AJAX dispatcher Security framework , security , v17 , v16	1	50	September 23, 2026
:orange_circle: Authenticated RCE in FindMeFollowMe function of Sangoma Connect Security security , v17 , v16	1	53	September 23, 2026
:green_circle: Authenticated Backup Metadata Hooks Execution Bypass Security backup , security , v17 , v16 , backup-restore	1	44	September 23, 2026
:green_circle: Authenticated Backup GraphQL Restore Filename Command Injection Security backup , security , v17 , v16 , backup-restore	1	48	September 23, 2026
:orange_circle: Unauthenticated RCE via SQL injection in Sangoma Connect RT API login Security firewall , security , v17 , v16	1	78	September 20, 2026
:orange_circle: Unauthenticated Missing Authorization in FreePBX UCP allows reset/overwrite of any user's dashboard templates Security ucp , security , v17 , v16	1	74	September 20, 2026
Updated security repo README Security freepbx , security , ai	1	72	September 19, 2026
[SURVEY] Limiting access to Asterisk CLI from the GUI Security ami , security , cli , acp , survey	7	272	August 28, 2026
AI Slop and Security noise AI security , ai	5	248	August 22, 2026
:orange_circle: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover Security security , v17 , v16 , missedcall	3	140	August 16, 2026
:red_circle: Unauthenticated remote code execution in FreePBX UCP via socket.io namespace auth bypass and AMI action injection Security ucp , security , v17	4	250	August 16, 2026
Asterisk versions updated with asterisk-version-switch Security asterisk , freepbx , security	1	105	August 15, 2026
:green_circle: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup Security backup , security , v17 , v16 , backup-restore	1	54	August 15, 2026
:green_circle: Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files Security moh , security , v17	1	53	August 15, 2026
:green_circle: Authenticated TTS AGI Command Injection Through TTS Name Security security , v17 , v16 , tts	1	58	August 15, 2026
Expired softphone license changes Sangoma Talk / Software Phone commercialmodules , freepbx , pbxact , security	2	330	August 12, 2026
Sangoma Silently Breaks S-Series Redirect — Manufacturer Neglect and Planned Obsolescence at Its Finest Sangoma Hardware Phones security , eol	66	1195	August 12, 2026