CVE-2026-54708

FreePBX is an open source IP PBX. Prior to versions 16.0.72 and 17.0.7, a critical vulnerability exists in the FreePBX backup Module that allows authenticated attackers to execute arbitrary code on the server. Authentication with a known username that has sufficient access permissions and/or writ...

CVE-2026-54708

The FreePBX open source IP PBX contains a critical vulnerability in the backup Module affecting versions prior to 16.0.72 and 17.0.7 . The root cause is improper path sanitization within the backup restore functionality. This flaw allows authenticated attackers with sufficient permissions or writ...

CVE-2026-54708 Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module

FreePBX is an open source IP PBX. Prior to versions 16.0.72 and 17.0.7, a critical vulnerability exists in the FreePBX backup Module that allows authenticated attackers to execute arbitrary code on the server. Authentication with a known username that has sufficient access permissions and/or writ...

CVE-2026-73664

The CVE-2026-73664 issue affects FreePBX (Open Source IP PBX) and concerns the publicKeySave AJAX endpoint in Backup.class.php, vulnerable from 17.0.5.34 through 17.0.11. It accepts an authenticated administrator’s SSH public key and appends it to /home/asterisk/.ssh/authorized_keys for the aster...

CVE-2026-73664 FreePBX: Authenticated Arbitrary SSH Key Injection via Backup Module

FreePBX is an open source IP PBX. From 17.0.5.34 until 17.0.11, the publicKeySave AJAX endpoint in Backup.class.php accepts an authenticated administrator's SSH public key and appends it to /home/asterisk/.ssh/authorizedkeys for the asterisk system user without reliably enforcing backup-only...

EUVD-2026-55969

Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module...

CVE-2026-16053

ManageEngine M365 Manager Plus and M365 Security Plus (versions below 4820) are affected by an Authenticated Path Traversal vulnerability in the Exchange Online backup module. The issue is described as a path traversal flaw in an authenticated context, with CVSS 3.1 indicating network access, low...

CVE-2026-16053 Path Traversal

Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module...

PT-2026-70077

Name of the Vulnerable Software and Affected Versions ManageEngine M365 Manager Plus versions prior to 4820 ManageEngine M365 Security Plus versions prior to 4820 Description An authenticated path traversal issue exists within the Exchange Online backup module. Path traversal is a flaw that allow...

CVE-2026-16053: Relative Path Traversal

Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module...

CVE-2026-72738 Dokploy: Authenticated RCE via Command Injection in backup.listBackupFiles search Parameter

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the backup.listBackupFiles tRPC endpoint in apps/dokploy/server/api/routers/backup.ts passes the search parameter through normalizeS3Path and interpolates it into an rclone lsjson command executed by childprocess.exec,...

CVE-2026-72738

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the backup.listBackupFiles tRPC endpoint in apps/dokploy/server/api/routers/backup.ts passes the search parameter through normalizeS3Path and interpolates it into an rclone lsjson command executed by childprocess.exec,...

CVE-2026-41201

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. In version 0.31.4.0, an attacker can achieve Full Account Takeover & Privilege Escalation via Stored DOM XSS in backup module filename field manipulated vi...

CVE-2018-25421

Open STA Manager 2.3 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by manipulating the file parameter. Attackers can send GET requests to modules/backup/actions.php with op=getfile and traverse directories using ../ sequences to access sensiti...

CVE-2026-26978: Deserialization of Untrusted Data

FreePBX is an open source IP PBX. In versions below 16.0.71 and 17.0.6, the backup module does not properly sanitize data during restore operations, potentially leading to compromise if the backup contains carefully crafted hostile data. During backup restore operations, FreePBX extracts selected...

FreePBX 代码问题漏洞

FreePBX is a set of tools from the FreePBX project that allow configuration of Asterisk an IP telephony system through a GUI graphical web-based interface. Versions of FreePBX prior to 16.0.71 and 17.0.6 contained code vulnerabilities. These vulnerabilities stemmed from the backup module failing ...

CVE-2026-41201

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. In version 0.31.4.0, an attacker can achieve Full Account Takeover & Privilege Escalation via Stored DOM XSS in backup module filename field manipulated vi...

CVE-2026-41201

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. In version 0.31.4.0, an attacker can achieve Full Account Takeover & Privilege Escalation via Stored DOM XSS in backup module filename field manipulated vi...

CVE-2026-41201

The CVE affects ci4ms (CodeIgniter 4-based CMS skeleton) in version 0.31.4.0, where the backup-management module’s filename field is vulnerable to stored DOM XSS. An attacker can leverage this to achieve full account takeover and privilege escalation; the issue is addressed in version 0.31.5.0. T...

CVE-2026-41201 CI4MS: Backup Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM Blind XSS Version 2

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. In version 0.31.4.0, an attacker can achieve Full Account Takeover & Privilege Escalation via Stored DOM XSS in backup module filename field manipulated vi...