FR
Product
framework
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 1Low 0
Watch
Add framework to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-66039 | 9.8 | Dec 9 | FreePBX Endpoint Manager Allows Unauthenticated Logins to Administrator Control Panel via Forged Basic Auth Header Affected: < 16.0.44; >= 17.0.1, < 17.0.23 |
| CVE-2025-55211 | 8.8 | Sep 15 | FreePBX Post-Authenticated Command Injection Affected: >= 17.0.19.11, < 17.0.21 |
| CVE-2025-67722 | 7.8 | Dec 16 | Authenticated amportal search for ‘freepbx_engine’ in non root writeable directories leads to potential privilege escalation Affected: < 16.0.45; >= 17.0.0, < 17.0.24 |
| CVE-2025-59056 | 7.5 | Sep 15 | FreePBX vulnerable to unauthenticated Denial of Service Affected: < 15.0.38; >= 16.0.0, < 16.0.41; >= 17.0.0, < 17.0.21 |
| CVE-2026-73661 | 6.5 | Aug 13 | FreePBX: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup Affected: < 16.0.47; >= 17.0.1, < 17.0.30 |
Showing 5