Fusionpbx

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 54
    Known Exploited: 0
    2
    Critical Level Threats
    12
    High Level Threats
    40
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-112195

    FusionPBX Dialplan Editor dialplan.php os command injection

    Last Modified: Oct 19, 2026
    Published: Oct 19, 2026

    CVE-2026-108161

    FusionPBX through 5.6.5 OS Command Injection via Caller ID in Recording ZIP Download

    Last Modified: Oct 14, 2026
    Published: Oct 10, 2026

    CVE-2024-24539

    FusionPBX before 5.2.0 does not validate a session.

    Last Modified: May 23, 2025
    Published: Mar 18, 2024

    CVE-2024-23387

    FusionPBX prior to 5.1.0 contains a cross-site scripting vulnerability. If this vulnerability is exploited by a remote authenticated attacker with an administrative privilege, an arbitrary script may be executed on the web browser of the user who is logging in to the product.

    Last Modified: May 30, 2025
    Published: Jan 19, 2024

    CVE-2022-35153

    FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/fax_send.php.

    Last Modified: Nov 21, 2024
    Published: Aug 18, 2022
    Items Per Page
    Fusionpbx Vulnerabilities & Security CVEs | CVE-DB