Sangoma FreePBX Improper Authentication Vulnerability

概要

参考情報

• community.freepbx.org/t/freepbx-security-vulnerability-sec-2019-001/62772 · Vendor Advisory
• pastebin.com/2CdsQMKW · Broken Link
• wiki.freepbx.org/display/FOP/2019-11-20+Remote+Admin+Authentication+Bypass · Vendor Advisory
• freepbx.org/category/blog · Product
• research.checkpoint.com/2020/inj3ctor3-operation-leveraging-asterisk-servers-for-monetization · Exploit
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2019-19006

freepbx のその他の脆弱性

• CVE-2026-75600高 8.8FreePBX is an open source IP PBX. Prior to version 17.0.9, authenticated users who are authorized to access the GraphQL api module interface…
• CVE-2026-54710高 8.8FreePBX is an open source IP PBX. Prior to versions 16.0.40 and 17.0.7, a critical remote code execution (RCE) vulnerability exists in the s…
• CVE-2026-54708高 8.8FreePBX is an open source IP PBX. Prior to versions 16.0.72 and 17.0.7, a critical vulnerability exists in the FreePBX backup Module that al…
• CVE-2026-54675高 8.8FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the sound language upload and con…
• CVE-2026-54674高 8.8FreePBX is an open source IP PBX. Prior to versions 16.0.39 and 17.0.7, users authenticated via User Control Panel (UCP) are able to execute…