FreePBX security-reporting

• CVE-2026-75600 High 8.6 FreePBX: Authenticated API generatedocs Host Command Injection 0.8%
• CVE-2026-54710 High 8.6 FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion) 0.5%
• CVE-2026-54708 High 8.6 Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module 0.5%
• CVE-2026-54675 High 8.7 FreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module 0.7%
• CVE-2026-54674 High 8.6 Authenticated Command Injection in FreePBX UCP Interface 0.9%
• CVE-2026-45562 High 7.7 FreePBX: Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module 0.4%
• CVE-2026-44237 High 7.6 FreePBX: Authenticated Access can lead to Subsequent OAuth2 Authentication Bypass in API Module 2.7%
• CVE-2026-44238 High 8.5 FreePBX: Authenticated SQL Injection via ORDER BY in CDR Reports 0.3%
• CVE-2026-44239 High 7.6 FreePBX: Authenticated Local File Inclusion in Dashboard Module 0.3%
• CVE-2026-46376 Critical 9.3 FreePBX: Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface 0.4%
• CVE-2026-26978 High 8.6 Free PBX backup: Deserialization of Untrusted Data in admin/modules/backup/Models/BackupSplFileInfo.php 0.9%
• CVE-2026-28287 High 8.6 FreePBX: Authenticated Remote Code Execution via Recordings Module AJAX Endpoints 9.3%
• CVE-2026-28284 High 8.6 FreePBX: Authenticated SQL Injection Vulnerabilities in FreePBX Logfiles Module 0.3%
• CVE-2026-28210 High 8.6 FreePBX: Authenticated SQL Injection in CDR (Call Data Record) Reports 0.3%
• CVE-2026-28209 High 7.5 FreePBX: Command Injection leading to Remote Code Execution in FreePBX ElevenLabs Text-to-Speech integration 1.0%