FreePBX security advisory (AV26-818)
Brief
Serial number: AV26-818 Date: August 14, 2026
As of August 13, 2026, FreePBX is affected by vulnerabilities in the following products:
- backup
- After or equal to 17.0.5.34, Prior to 17.0.11
- framework
- After or equal to 17.0.1, Prior to 17.0.30
- Prior to 16.0.47
- missedcall
- After or equal to 17.0.1, Prior to 17.0.4
- Prior to 16.0.11
- music
- Prior to 17.0.7
- tts
- After or equal to 17.0.1, Prior to 17.0.5.4
- Prior to 16.0.6
- ucp
- Prior to 17.0.9
The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.
- FreePBX Security Advisories
FreePBX security advisory (AV26-818) - Canadian Centre for Cyber Security