FusionPBX
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| FusionPBX | 2 | – | Oct 10, 2026 |
Exploited and recent CVEs
- CVE-2026-108161 FusionPBX through 5.6.5 OS Command Injection via Caller ID in Recording ZIP Download 1.1%
- CVE-2024-23387 FusionPBX prior to 5.1.0 contains a cross-site scripting vulnerability. If this vulnerability is exploited by a remote authenticated attacker with an administrative privilege, an arbitrary script may 0.5%