Product by FreePBX
Framework
5 known vulnerabilities in Framework (FreePBX), 0 of them actively exploited (CISA KEV).
Key figures
5
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-66039 | FreePBX Framework: Improper Authentication | 9.8 | |
| High | CVE-2026-73661 | FreePBX: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup | 6.5 | |
| High | CVE-2025-55211 | FreePBX Post-Authenticated Command Injection | 8.8 | |
| High | CVE-2025-59056 | FreePBX vulnerable to unauthenticated Denial of Service | 7.5 | |
| High | CVE-2025-67722 | FreePBX Framework: Untrusted Search Path | 7.8 |