FreePBX security advisory (AV26–579)

Serial number: AV26–579
Date: June 10, 2026

On June 10, 2026, FreePBX published a security advisory to address a vulnerability in the following product:

• FreePBX Security-Reporting music (FreePBX 16) – versions 16.0.4 and prior
• FreePBX Security-Reporting music (FreePBX 17) – versions 17.0.6 and prior

The Cyber Centre encourages users and administrators to review the web links provided, apply the necessary updates and perform the suggested mitigations.

• Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module
• FreePBX Security Advisories