Advisories · Technology

FusionPBX.

Every CVE that names FusionPBX among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-112195 CVE record

CVSS 5.1 Medium

FusionPBX Dialplan Editor dialplan.php os command injection
- FusionPBX
- Command injection
Not analysed yet 19 Oct 2026
CVE-2026-108161 CVE record

CVSS 7.7 High

FusionPBX through 5.6.5 OS Command Injection via Caller ID in Recording ZIP Download
- fusionpbx
- Command injection
Not analysed yet 10 Oct 2026
CVE-2024-23387 CVE record

CVSS 4.8 Medium

Cross-site scripting in FusionPBX
- FusionPBX
- Cross-site scripting (XSS)
Not analysed yet 19 Jan 2024