What’s Vulnerable › Products

FreePBX api vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your FreePBX api version is affected

Latest FreePBX api vulnerabilities

• CVE-2026-40520 — FreePBX api module Command Injection via GraphQL (CVSS 8.8)
• CVE-2025-55739 — api: Shared OAuth Signing Key Between Different Instances (CVSS 5.1)