FreePBX security advisory (AV26-973)

Serial number: AV26-973
Date: September 29, 2026

As of September 28, 2026, FreePBX is affected by vulnerabilities in the following products:

  • music
    • Prior to 16.0.4
    • Prior to 17.0.6
  • ucp
    • Prior to 16.0.39
    • Prior to 17.0.6
  • soundlang
    • Prior to 17.0.5
    • Prior to 16.0.10
  • backup
    • Prior to 16.0.72
    • Prior to 17.0.7
  • superfecta
    • Prior to 16.0.40
    • Prior to 17.0.7
  • api
    • Prior to 17.0.9

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

Date modified: