|
:green_circle: Authenticated low-privilege UCP user can modify contacts of other users
|
|
6
|
116
|
October 1, 2026
|
|
:green_circle: Authenticated privilege escalation in API module via SQL injection in Pinsets
|
|
0
|
43
|
September 29, 2026
|
|
:orange_circle: Authenticated low-privilege UCP user can read full database via SQL injection
|
|
0
|
37
|
September 29, 2026
|
|
:green_circle: Authenticated admin SQL injection via SIPSTATION module
|
|
0
|
31
|
September 29, 2026
|
|
Deutsche Telekom - Company Flex - Feature Request - SDP 183 codecs choice
|
|
3
|
121
|
September 28, 2026
|
|
How many CCU Asterisk can handle ?
|
|
13
|
327
|
September 24, 2026
|
|
Issues migrating Diguim phones from FreePBX 13 to 17
|
|
7
|
237
|
September 17, 2026
|
|
Incoming calls issue
|
|
6
|
140
|
September 17, 2026
|
|
:green_circle: Authenticated Root OS Command Injection in Backup GraphQL restoreBackup
|
|
0
|
36
|
September 17, 2026
|
|
:green_circle: Authenticated Second-Order OS Command Execution in FreePBX Recordings via Dialplan Injection
|
|
0
|
37
|
September 17, 2026
|
|
:green_circle: Authenticated RCE in UCP via AMI
|
|
0
|
41
|
September 17, 2026
|
|
:green_circle: Authenticated admin can read any file via call recording report
|
|
0
|
35
|
September 17, 2026
|
|
:orange_circle: Authenticated RCE via unsafe unserialize in backup restore
|
|
0
|
34
|
September 17, 2026
|
|
:orange_circle: Unauthenticated inbound CallerID becomes stored XSS in CEL Reports
|
|
0
|
46
|
September 17, 2026
|
|
Sangoma US-20 Keeps Hanging
|
|
0
|
52
|
September 15, 2026
|
|
Upgrade Framework module failing with /usr/share/asterisk/agi-bin not found
|
|
1
|
53
|
October 2, 2026
|
|
:green_circle: Authenticated but Broken access control in the FreePBX framework GraphQL API
|
|
1
|
53
|
September 30, 2026
|
|
Disaster has struck, rebuilt my phone system, need help getting functionality back
|
|
13
|
274
|
September 24, 2026
|
|
:green_circle: Authenticated admin with limited privileges can escalate perms via Framework BMO AJAX dispatcher
|
|
1
|
46
|
September 23, 2026
|
|
:orange_circle: Authenticated RCE in FindMeFollowMe function of Sangoma Connect
|
|
1
|
50
|
September 23, 2026
|
|
:green_circle: Authenticated Backup Metadata Hooks Execution Bypass
|
|
1
|
41
|
September 23, 2026
|
|
:green_circle: Authenticated Backup GraphQL Restore Filename Command Injection
|
|
1
|
44
|
September 23, 2026
|
|
:orange_circle: Unauthenticated RCE via SQL injection in Sangoma Connect RT API login
|
|
1
|
74
|
September 20, 2026
|
|
:orange_circle: Unauthenticated Missing Authorization in FreePBX UCP allows reset/overwrite of any user's dashboard templates
|
|
1
|
71
|
September 20, 2026
|
|
Unable to install FreePBX
|
|
16
|
485
|
September 19, 2026
|
|
Installation error: Chowning directories...PHP Fatal error: Maximum execution time of 750 seconds exceeded in /var/www/html/admin/libraries/Console/Chown.class.php on line 456
|
|
2
|
75
|
September 12, 2026
|
|
FreePBX 17 New install after restoring from FreePBX 15 full backup
|
|
4
|
172
|
September 5, 2026
|
|
Installing FreePBX 17
|
|
17
|
417
|
September 4, 2026
|
|
FreePBX 17.0.30 Admin Dashboard Quirk?
|
|
6
|
228
|
September 1, 2026
|
|
New system install - drive allocations seem small
|
|
3
|
91
|
July 30, 2026
|