Browse CVEs

HIGH 8.8 CVE-2026-40520 FreePBX api module version 17.0.8 and prior contain a command injection vulnerability in the initiateGqlAPIProcess() function where GraphQL mutation … Api 17.0.8+ Fix from $1,9502026-04-21 MEDIUM 6.1 CVE-2019-16967 An issue was discovered in Manager 13.x before 13.0.2.6 and 15.x before 15.0.6 before FreePBX 14.0.10.3. In the Manager module form (html\admin\modul… Manager 13.0.2.6 / 14.0.10.3+ Fix from $1,6002019-10-21 MEDIUM 6.1 CVE-2019-16966 An issue was discovered in Contactmanager 13.x before 13.0.45.3, 14.x before 14.0.5.12, and 15.x before 15.0.8.21 for FreePBX 14.0.10.3. In the Conta… Contactmanager 13.0.45.3 / 14.0.5.12+ Fix from $1,6002019-10-21 HIGH 10.0 CVE-2014-7235EPSS 43% htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface (ARI) in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.… Freepbx after 2.9.0.8 Fix from $1,9502014-10-07 HIGH 7.5 CVE-2014-1903EPSS 53% admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 before 2.11.0.23, and 12 before 12.0.1alpha22 does not… Freepbx No fix yet Fix from $1,9502014-02-18 MEDIUM 6.8 CVE-2009-1802 Multiple cross-site request forgery (CSRF) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote att… Freepbx Patch available Fix from $1,6002009-05-28 MEDIUM 5.0 CVE-2009-1803 FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, generates different error messages for a failed login attempt depending on whe… Freepbx Patch available Fix from $1,6002009-05-28 MEDIUM 6.5 CVE-2007-2350 admin/config.php in the music-on-hold module in freePBX 2.2.x allows remote authenticated administrators to execute arbitrary commands via shell meta… Freepbx after 2.2.1 Fix from $1,6002007-04-30 MEDIUM 6.8 CVE-2007-2191 Multiple cross-site scripting (XSS) vulnerabilities in freePBX 2.2.x allow remote attackers to inject arbitrary web script or HTML via the (1) From, … Freepbx No fix yet Fix from $1,6002007-04-24