security-reporting vulnerabilities

CVEs whose affected-version data names the security-reporting package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-46376Critical· 9.3PoC

5mo ago

FreePBX: Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface

FreePBX is an open source IP PBX. From 15.0.42 to before 16.0.45 and 17.0.7, unauthenticated users may be able to access the User Control Panel (UCP) using hard-coded initial template credentials if these were not immediately changed by …

▾ AbyssalFreePBX · security-reportingEPSS 0.43%via CVEORG