agentprime: freepbx-security-reportingEvery new CVE for freepbx-security-reporting.https://agentprime.io/CVE-2026-75600: FreePBX: Authenticated API generatedocs Host Command Injectionhttps://agentprime.io/advisories/CVE-2026-75600/https://agentprime.io/advisories/CVE-2026-75600/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 17:41:41 GMTCVECVE-2026-54710: FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)https://agentprime.io/advisories/CVE-2026-54710/https://agentprime.io/advisories/CVE-2026-54710/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 17:41:01 GMTCVECVE-2026-54708: Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Modulehttps://agentprime.io/advisories/CVE-2026-54708/https://agentprime.io/advisories/CVE-2026-54708/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 17:40:43 GMTCVECVE-2026-54675: FreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang Modulehttps://agentprime.io/advisories/CVE-2026-54675/https://agentprime.io/advisories/CVE-2026-54675/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 17:40:21 GMTCVECVE-2026-54674: Authenticated Command Injection in FreePBX UCP Interfacehttps://agentprime.io/advisories/CVE-2026-54674/https://agentprime.io/advisories/CVE-2026-54674/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 17:37:22 GMTCVECVE-2026-45562: FreePBX: Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Modulehttps://agentprime.io/advisories/CVE-2026-45562/https://agentprime.io/advisories/CVE-2026-45562/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 17:36:08 GMTCVECVE-2026-44237: FreePBX: Authenticated Access can lead to Subsequent OAuth2 Authentication Bypass in API Modulehttps://agentprime.io/advisories/CVE-2026-44237/https://agentprime.io/advisories/CVE-2026-44237/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 May 2026 12:46:22 GMTCVECVE-2026-44238: FreePBX: Authenticated SQL Injection via ORDER BY in CDR Reportshttps://agentprime.io/advisories/CVE-2026-44238/https://agentprime.io/advisories/CVE-2026-44238/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 May 2026 12:44:26 GMTCVECVE-2026-44239: FreePBX: Authenticated Local File Inclusion in Dashboard Modulehttps://agentprime.io/advisories/CVE-2026-44239/https://agentprime.io/advisories/CVE-2026-44239/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 May 2026 12:42:32 GMTCVECVE-2026-46376: FreePBX: Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interfacehttps://agentprime.io/advisories/CVE-2026-46376/https://agentprime.io/advisories/CVE-2026-46376/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 May 2026 12:39:57 GMTCVEcriticalCVE-2026-26978: Free PBX backup: Deserialization of Untrusted Data in admin/modules/backup/Models/BackupSplFileInfo.phphttps://agentprime.io/advisories/CVE-2026-26978/https://agentprime.io/advisories/CVE-2026-26978/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 18 May 2026 20:49:04 GMTCVECVE-2026-28287: FreePBX: Authenticated Remote Code Execution via Recordings Module AJAX Endpointshttps://agentprime.io/advisories/CVE-2026-28287/https://agentprime.io/advisories/CVE-2026-28287/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Mar 2026 18:25:54 GMTCVECVE-2026-28284: FreePBX: Authenticated SQL Injection Vulnerabilities in FreePBX Logfiles Modulehttps://agentprime.io/advisories/CVE-2026-28284/https://agentprime.io/advisories/CVE-2026-28284/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Mar 2026 18:24:50 GMTCVECVE-2026-28210: FreePBX: Authenticated SQL Injection in CDR (Call Data Record) Reportshttps://agentprime.io/advisories/CVE-2026-28210/https://agentprime.io/advisories/CVE-2026-28210/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Mar 2026 18:24:06 GMTCVECVE-2026-28209: FreePBX: Command Injection leading to Remote Code Execution in FreePBX ElevenLabs Text-to-Speech integrationhttps://agentprime.io/advisories/CVE-2026-28209/https://agentprime.io/advisories/CVE-2026-28209/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Mar 2026 18:22:38 GMTCVE