What’s Vulnerable › Vulnerabilities

CVE-2022-35153

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-08-18 · updated 2026-06-17
• Weakness: CWE-116

Description

FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/fax_send.php.

Affected products

• fusionpbx: 5.0.1

References

• https://github.com/fusionpbx/fusionpbx/commit/07679fe80dadb08ca23d0fc16c0f832348bfec78
• https://github.com/fusionpbx/fusionpbx/commit/de22a9121a091e7fedddff22329dd6149dc5ab28
• https://github.com/fusionpbx/fusionpbx/commit/07679fe80dadb08ca23d0fc16c0f832348bfec78
• https://github.com/fusionpbx/fusionpbx/commit/de22a9121a091e7fedddff22329dd6149dc5ab28

Get alerted when CVE-2022-35153 or the next vulnerability affects your stack