Vendor/product archive

freepbx / api CVEs

Beta · best-effort

1 CVEs tagged to freepbx / api — 0 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to freepbx vendor archive

CVE-2026-40520

Published Apr 21, 2026

FreePBX api module version 17.0.8 and prior contain a command injection vulnerability in the initiateGqlAPIProcess() function where GraphQL mutation input fields are passed direct…

CVSS 8.6 · High

evidence mentions: 4
Buzz score: 22.6

Vendor/product tagsBeta · best-effort

Showing 1-1 of 1 CVEsPage 1 of 1