Sangoma Freepbx vulnerabilities
50 published vulnerabilities in Sangoma Freepbx, 2 of them exploited in the wild. The most were published in 2026 (18), and 18 so far in 2026.
Sangoma Freepbx vulnerabilities by year
2009
2010
2012
2014
2018
2019
2020
2023
2024
2025
2026
Most exploited Sangoma Freepbx vulnerabilities
- CVE-2025-57819 Sangoma FreePBX Authentication Bypass
- CVE-2019-19006 Sangoma FreePBX Improper Authentication
- CVE-2014-7235 Deserialization in n/a
- CVE-2026-73663 FreePBX: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover
- CVE-2026-73665 FreePBX UCP: Unauthenticated remote code execution via socket.io namespace auth bypass and AMI action injection
- CVE-2026-46376 FreePBX: Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface
- CVE-2025-66039 FreePBX Endpoint Manager Allows Unauthenticated Logins to Administrator Control Panel via Forged Basic Auth Header
- CVE-2023-43336 Missing authorization in n/a
- CVE-2026-54675 FreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module
- CVE-2024-58294 FreePBX 16 Authenticated Remote Code Execution via API Module
- CVE-2026-54674 Authenticated Command Injection in FreePBX UCP Interface
- CVE-2026-54708 Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.