CVE-2025-55210

FreePBX is an open-source web-based graphical user interface GUI that manages Asterisk. Prior to 17.0.5 and 16.0.17, FreePBX module api PBX API is vulnerable to privilege escalation by authenticated users with REST/GraphQL API access. This vulnerability allows an attacker to forge a valid JWT wit...

PT-2026-7859

Name of the Vulnerable Software and Affected Versions FreePBX versions prior to 17.0.5 and prior to 16.0.17 Description FreePBX, a web-based GUI for managing Asterisk, has an issue where authenticated users with access to the REST/GraphQL API can potentially elevate their privileges. An attacker...