FreePBX Security Advisory AV26-818 Warns of Vulnerabilities in Multiple Products

Advisory Number: AV26-818
Date Issued: August 14, 2026

FreePBX has issued a security advisory regarding vulnerabilities affecting several of its products. As of August 13, 2026, the following components are identified as vulnerable:

• Backup
  • Versions: After or equal to 17.0.5.34, Prior to 17.0.11
• Framework
  • Versions: After or equal to 17.0.1, Prior to 17.0.30
  • Prior to 16.0.47
• Missed Call
  • Versions: After or equal to 17.0.1, Prior to 17.0.4
  • Prior to 16.0.11
• Music
  • No specific versions listed.
• Text-to-Speech (TTS)
  • Versions: After or equal to 17.0.1, Prior to 17.0.5.4
  • Prior to 16.0.6
• User Control Panel (UCP)
  • No specific versions listed.

The Cyber Centre strongly advises users and administrators to review the details of this advisory and apply the necessary updates to mitigate potential risks. For further information and guidance, please refer to the official advisory at the Cyber Centre’s website.

It is crucial for organizations utilizing FreePBX to ensure that they are running the latest versions of the affected products to protect against potential vulnerabilities. Regular updates and security patches are essential components of a robust cybersecurity strategy.