FreePBX security advisory (AV26-818)

Serial number: AV26-818
Date: August 14, 2026

As of August 13, 2026, FreePBX is affected by vulnerabilities in the following products:

  • backup
    • After or equal to 17.0.5.34, Prior to 17.0.11
  • framework
    • After or equal to 17.0.1, Prior to 17.0.30
    • Prior to 16.0.47
  • missedcall
    • After or equal to 17.0.1, Prior to 17.0.4
    • Prior to 16.0.11
  • music
    • Prior to 17.0.7
  • tts
    • After or equal to 17.0.1, Prior to 17.0.5.4
    • Prior to 16.0.6
  • ucp
    • Prior to 17.0.9

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

Date modified: