|
Critical PHP Security Vulnerabilities: Action Required for FreePBX and PBXact
|
|
4
|
1400
|
November 4, 2026
|
|
PHP CVE Patching
|
|
94
|
6735
|
November 3, 2026
|
|
No contacts in Sangoma Phone Desktop
|
|
2
|
90
|
November 3, 2026
|
|
:green_circle: Authenticated Administrator Control Panel users can change passwords for any other account
|
|
0
|
52
|
October 30, 2026
|
|
:orange_circle: Unauthenticated Administrator Control Panel login attempts allowed without proper restrictions
|
|
0
|
40
|
October 30, 2026
|
|
FaxPro issue on FreePBX 17.0.33.2 upgrade
|
|
15
|
466
|
October 29, 2026
|
|
FreePBX 17 for an Appliance 100
|
|
1
|
96
|
October 25, 2026
|
|
FreePBX Configuration Settings for VoIP.ms and Vitelity
|
|
1
|
152
|
October 15, 2026
|
|
:green_circle: Authenticated low-privilege UCP user can modify contacts of other users
|
|
7
|
207
|
October 31, 2026
|
|
:green_circle: Authenticated privilege escalation in API module via SQL injection in Pinsets
|
|
1
|
62
|
October 29, 2026
|
|
:orange_circle: Authenticated low-privilege UCP user can read full database via SQL injection
|
|
1
|
66
|
October 29, 2026
|
|
:green_circle: Authenticated admin SQL injection via SIPSTATION module
|
|
1
|
48
|
October 29, 2026
|
|
Deutsche Telekom - Company Flex - Feature Request - SDP 183 codecs choice
|
|
4
|
181
|
October 28, 2026
|
|
How many CCU Asterisk can handle ?
|
|
14
|
435
|
October 25, 2026
|
|
Issues migrating Diguim phones from FreePBX 13 to 17
|
|
8
|
291
|
October 17, 2026
|
|
Incoming calls issue
|
|
6
|
181
|
September 17, 2026
|
|
:green_circle: Authenticated Root OS Command Injection in Backup GraphQL restoreBackup
|
|
1
|
51
|
October 17, 2026
|
|
:green_circle: Authenticated Second-Order OS Command Execution in FreePBX Recordings via Dialplan Injection
|
|
1
|
57
|
October 17, 2026
|
|
:green_circle: Authenticated RCE in UCP via AMI
|
|
1
|
55
|
October 17, 2026
|
|
:green_circle: Authenticated admin can read any file via call recording report
|
|
1
|
53
|
October 17, 2026
|
|
:orange_circle: Authenticated RCE via unsafe unserialize in backup restore
|
|
1
|
47
|
October 17, 2026
|
|
:orange_circle: Unauthenticated inbound CallerID becomes stored XSS in CEL Reports
|
|
1
|
56
|
October 17, 2026
|
|
Sangoma US-20 Keeps Hanging
|
|
1
|
68
|
October 16, 2026
|
|
Upgrade Framework module failing with /usr/share/asterisk/agi-bin not found
|
|
1
|
82
|
October 2, 2026
|
|
:green_circle: Authenticated but Broken access control in the FreePBX framework GraphQL API
|
|
1
|
63
|
September 30, 2026
|
|
Disaster has struck, rebuilt my phone system, need help getting functionality back
|
|
13
|
318
|
September 24, 2026
|
|
:green_circle: Authenticated admin with limited privileges can escalate perms via Framework BMO AJAX dispatcher
|
|
1
|
52
|
September 23, 2026
|
|
:orange_circle: Authenticated RCE in FindMeFollowMe function of Sangoma Connect
|
|
1
|
61
|
September 23, 2026
|
|
:green_circle: Authenticated Backup Metadata Hooks Execution Bypass
|
|
1
|
50
|
September 23, 2026
|
|
:green_circle: Authenticated Backup GraphQL Restore Filename Command Injection
|
|
1
|
51
|
September 23, 2026
|