CVE-2026-73661Medium· 6.5▾ SunlitFreePBX is an open source IP PBX. Prior to 16.0.47 and 17.0.30, the FreePBX Framework module permits a crafted backup to restore the hidden AUTHTYPE setting with the value none through runRestore() in amp_conf/htdocs/admin/libraries/Buil…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 18.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.3%
0.3% → 0.6%
Last analysed / modified upstream
— → 6.5
none → medium
FreePBX is an open source IP PBX. Prior to 16.0.47 and 17.0.30, the FreePBX Framework module permits a crafted backup to restore the hidden AUTHTYPE setting with the value none through runRestore() in amp_conf/htdocs/admin/libraries/Builtin/Restore.php. An authenticated user with sufficient backup-restore access or write access to backup files can thereby disable FreePBX authentication during restoration, bypassing the user-interface removal of AUTHTYPE=none. This issue is fixed in versions 16.0.47 and 17.0.30.
freepbx >= 16.0, < 16.0.47freepbx >= 17.0, < 17.0.30Upgrade past the affected range:
freepbx 17.0.30Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-59429Medium· 5.4FreePBX is an open source GUI for managing Asterisk
CVE-2025-67722High· 7.8FreePBX is an open-source web-based graphical user interface (GUI) that manages Asterisk
CVE-2025-67736High· 7.2The FreePBX module tts (Text to Speech) for FreePBX, an open-source web-based graphical user interface (GUI) that manages Asterisk
CVE-2026-75600High· 8.8FreePBX is an open source IP PBX
CVE-2026-54675High· 8.8FreePBX is an open source IP PBX
CVE-2026-54708High· 8.8FreePBX is an open source IP PBX