Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1325 CNY

100%
Buy Us a Coffee

security-reporting — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in security-reporting, with AI-generated Chinese analysis, references, and POCs.

Vendor: FreePBX

CVE IDTitleCVSSSeverityPublished
CVE-2026-44237 FreePBX: Authenticated Access can lead to Subsequent OAuth2 Authentication Bypass in API Module CWE-1390--2026-05-29
CVE-2026-44238 FreePBX: Authenticated SQL Injection via ORDER BY in CDR Reports CWE-89--2026-05-29
CVE-2026-44239 FreePBX: Authenticated Local File Inclusion in Dashboard Module CWE-98--2026-05-29
CVE-2026-46376 FreePBX: Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface CWE-798--2026-05-29
CVE-2026-26978 Free PBX backup: Deserialization of Untrusted Data in admin/modules/backup/Models/BackupSplFileInfo.php CWE-502--2026-05-18
CVE-2026-28287 FreePBX: Authenticated Remote Code Execution via Recordings Module AJAX Endpoints CWE-78 8.8 -2026-03-05
CVE-2026-28284 FreePBX: Authenticated SQL Injection Vulnerabilities in FreePBX Logfiles Module CWE-89 8.8 -2026-03-05
CVE-2026-28210 FreePBX: Authenticated SQL Injection in CDR (Call Data Record) Reports CWE-89 8.8 -2026-03-05
CVE-2026-28209 FreePBX: Command Injection leading to Remote Code Execution in FreePBX ElevenLabs Text-to-Speech integration CWE-78 8.8 -2026-03-05

All 9 known CVE vulnerabilities affecting security-reporting with full Chinese analysis, references, and POCs where available.