FreePBX api güvenlik açıkları (CVE)

FreePBX api için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

3 sonuç
7.2Yüksek
CVE-2026-40520

FreePBX api module Command Injection via GraphQL

FreePBX api

FreePBX api module version 17.0.8 and prior contain a command injection vulnerability in the initiateGqlAPIProcess() function where GraphQL mutation input fields are passed directly to shell_exec() without sanitization or escaping. An authenticated user with …

1.4%EPSS
5.1Orta
CVE-2025-55739

api: Shared OAuth Signing Key Between Different Instances

FreePBX api

api is a module for FreePBX@, which is an open source GUI that controls and manages Asterisk© (PBX). In versions lower than 15.0.13, 16.0.2 through 16.0.14, 17.0.1 and 17.0.2, there is an identical OAuth private key used across multiple systems that installed…