Sangoma
Sangoma Freepbx: vulnerabilidades y CVE
Sangoma Freepbx tiene 41 vulnerabilidades publicadas, 14 de ellas en los últimos 12 meses. 5 son críticas y 2 figuran en el catálogo de explotación activa de CISA.
CVE41
Últimos 12 meses14
Críticas5
Explotadas activamente2
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2019-19006 | Crítica (9.8) | 56% | ⚠ Explotación activa | 21 nov 2019 | Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control. |
| CVE-2025-57819 | Crítica (10) | 85% | ⚠ Explotación activa | 28 ago 2025 | FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator… |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-46376 | Crítica (9.3) | 0.50% | — | 29 may 2026 | FreePBX is an open source IP PBX. From 15.0.42 to before 16.0.45 and 17.0.7, unauthenticated users may be able to access the User Control Panel (UCP) using hard-coded initial template credentials if these were not… |
| CVE-2026-44239 | Alta (7.6) | 0.49% | — | 29 may 2026 | FreePBX is an open source IP PBX. Prior to 16.0.22 and 17.0.5, the Dashboard module's getcontent AJAX handler includes PHP files based on user-supplied input without path sanitization. The $_REQUEST['rawname'] parameter… |
| CVE-2026-44238 | Alta (8.5) | 0.53% | — | 29 may 2026 | FreePBX is an open source IP PBX. Prior to 16.0.50 and 17.0.11, the CDR Reports module page allows SQL injection through the order and sort POST parameters. Authentication with a FreePBX Administration Control Panel… |
| CVE-2026-44237 | Alta (7.6) | 0.35% | — | 29 may 2026 | FreePBX is an open source IP PBX. Prior to 17.0.8, the FreePBX api module's OAuth2 implementation does not sufficiently validate client credentials during token issuance. Knowledge of a valid client_id is required. The… |
| CVE-2026-28287 | Alta (8.6) | 1.6% | — | 5 mar 2026 | FreePBX is an open source IP PBX. From versions 16.0.17.2 to before 16.0.20 and from version 17.0.2.4 to before 17.0.5, multiple command injection vulnerabilities exist in the recordings module. This issue has been… |
| CVE-2026-28284 | Alta (8.6) | 0.46% | — | 5 mar 2026 | FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, the FreePBX logfiles module contains several authenticated SQL injection vulnerabilities. This issue has been patched in versions 16.0.10 and… |
| CVE-2026-28210 | Alta (8.6) | 0.56% | — | 5 mar 2026 | FreePBX is an open source IP PBX. Prior to versions 16.0.49 and 17.0.7, FreePBX module cdr (Call Data Record) is vulnerable to SQL query injection. This issue has been patched in versions 16.0.49 and 17.0.7. |
| CVE-2026-28209 | Alta (7.5) | 1.5% | — | 5 mar 2026 | FreePBX is an open source IP PBX. From versions 16.0.17.2 to before 16.0.20 and from version 17.0.2.4 to before 17.0.5, a command injection vulnerability exists in FreePBX when using the ElevenLabs Text-to-Speech (TTS)… |
| CVE-2025-55210 | Baja (2) | 0.32% | — | 12 feb 2026 | FreePBX is an open-source web-based graphical user interface (GUI) that manages Asterisk. Prior to 17.0.5 and 16.0.17, FreePBX module api (PBX API) is vulnerable to privilege escalation by authenticated users with… |
| CVE-2025-67736 | Alta (8.6) | 6.4% | — | 16 dic 2025 | The FreePBX module tts (Text to Speech) for FreePBX, an open-source web-based graphical user interface (GUI) that manages Asterisk. Versions prior to 16.0.5 and 17.0.5 are vulnerable to SQL injection by authenticated… |
| CVE-2025-67722 | Media (5.7) | 0.13% | — | 16 dic 2025 | FreePBX is an open-source web-based graphical user interface (GUI) that manages Asterisk. Prior to versions 16.0.45 and 17.0.24 of the FreePBX framework, an authenticated local privilege escalation exists in the… |
| CVE-2024-58294 | Alta (8.7) | 3.6% | — | 11 dic 2025 | FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands. Attackers can exploit the 'generatedocs'… |
| CVE-2025-66039 | Crítica (9.3) | 3.3% | — | 9 dic 2025 | FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions are vulnerable to authentication bypass when the authentication type is set to "webserver." When providing an… |
| CVE-2025-59429 | Alta (8.5) | 0.19% | — | 14 oct 2025 | FreePBX is an open source GUI for managing Asterisk. In versions prior to 16.0.68.39 for FreePBX 16 and versions prior to 17.0.18.38 for FreePBX 17, a reflected cross-site scripting vulnerability is present on the… |
| CVE-2025-59056 | Media (6.6) | 0.46% | — | 15 sept 2025 | FreePBX is an open-source web-based graphical user interface. In FreePBX 15, 16, and 17, malicious connections to the Administrator Control Panel web interface can cause the uninstall function to be triggered for… |
| CVE-2025-55211 | Media (6.3) | 0.43% | — | 15 sept 2025 | FreePBX is an open-source web-based graphical user interface. From 17.0.19.11 to before 17.0.21, authenticated users of the Administrator Control Panel (ACP) can run arbitrary shell commands by maliciously changing… |
| CVE-2025-57819 | Crítica (10) | 85% | ⚠ Explotación activa | 28 ago 2025 | FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator… |
| CVE-2024-53564 | Alta (7.2) | 0.35% | — | 2 dic 2024 | A vulnerability was discovered in FreePBX 17.0.19.17. It does not verify the type of uploaded (valid FreePBX module) files, allowing high-privilege administrators to insert unwanted files. NOTE: the Supplier's position… |
| CVE-2023-26566 | Alta (8.6) | 0.71% | — | 14 may 2024 | Sangoma FreePBX 1805 through 2203 on Linux contains hardcoded credentials for the Asterisk REST Interface (ARI), which allows remote attackers to reconfigure Asterisk and make external and internal calls via HTTP and… |
| CVE-2023-43336 | Alta (8.8) | 0.72% | — | 2 nov 2023 | Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to contain an access control issue via a modified parameter value, e.g., changing extension=self to extension=101. |
| CVE-2019-25090 | Media (6.1) | 0.52% | — | 27 dic 2022 | A vulnerability was found in FreePBX arimanager up to 13.0.5.3 and classified as problematic. Affected by this issue is some unknown functionality of the component Views Handler. The manipulation of the argument dataurl… |
| CVE-2020-36630 | Crítica (9.8) | 0.68% | — | 25 dic 2022 | A vulnerability was found in FreePBX cdr 14.0. It has been classified as critical. This affects the function ajaxHandler of the file ucp/Cdr.class.php. The manipulation of the argument limit/offset leads to sql… |
| CVE-2019-19852 | Media (4.8) | 0.56% | — | 16 mar 2020 | An XSS Injection vulnerability exists in Sangoma FreePBX and PBXact 13, 14, and 15 within the Call Event Logging report screen in the cel module at the admin/config.php?display=cel URI via date fields. This affects cel… |
| CVE-2019-19615 | Media (4.8) | 0.56% | — | 16 mar 2020 | Multiple XSS vulnerabilities exist in the Backup & Restore module \ v14.0.10.2 through v14.0.10.7 for FreePBX, as shown at /admin/config.php?display=backup on the FreePBX Administrator web site. An attacker can modify… |
| CVE-2019-19538 | Alta (7.2) | 3.1% | — | 16 mar 2020 | In Sangoma FreePBX 13 through 15 and sysadmin (aka System Admin) 13.0.92 through 15.0.13.6 modules have a Remote Command Execution vulnerability that results in Privilege Escalation. |
| CVE-2019-19851 | Media (4.8) | 0.53% | — | 16 mar 2020 | An XSS Injection vulnerability exists in Sangoma FreePBX and PBXact 13, 14, and 15 within the Debug/Test page of the Superfecta module at the admin/config.php?display=superfecta URI. This affects Superfecta through… |
| CVE-2019-19552 | Media (4.8) | 0.55% | — | 6 dic 2019 | In userman 13.0.76.43 through 15.0.20 in Sangoma FreePBX, XSS exists in the user management screen of the Administrator web site, i.e., the/admin/config.php?display=userman URI. An attacker with sufficient privileges… |
| CVE-2019-19551 | Media (4.8) | 0.55% | — | 6 dic 2019 | In userman 13.0.76.43 through 15.0.20 in Sangoma FreePBX, XSS exists in the User Management screen of the Administrator web site. An attacker with access to the User Control Panel application can submit malicious values… |
| CVE-2019-19006 | Crítica (9.8) | 56% | ⚠ Explotación activa | 21 nov 2019 | Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control. |
| CVE-2019-16967 | Media (6.1) | 1.3% | — | 21 oct 2019 | An issue was discovered in Manager 13.x before 13.0.2.6 and 15.x before 15.0.6 before FreePBX 14.0.10.3. In the Manager module form (html\admin\modules\manager\views\form.php), an unsanitized managerdisplay variable… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.