CVE-2026-73665

creationtimestamp| type| source ---|---|--- 2026-08-13 22:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msyplcd4lu2y...

CVE-2026-73665

FreePBX UCP vulnerability affecting versions prior to 17.0.9. The UCP Node server (ports 8001/8003) uses io.use(checkAuth) but Socket.IO v4 applies that middleware only to the default namespace, allowing an unauthenticated client to reach custom namespaces. This can lead to crafted AMI actions th...