Unrated severityNVD Advisory· Published Mar 5, 2026· Updated Mar 7, 2026
FreePBX: Authenticated SQL Injection Vulnerabilities in FreePBX Logfiles Module
CVE-2026-28284
Description
FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, the FreePBX logfiles module contains several authenticated SQL injection vulnerabilities. This issue has been patched in versions 16.0.10 and 17.0.5.
Affected products
2- Range: < 16.0.10
Patches
Vulnerability mechanics
References
1- github.com/FreePBX/security-reporting/security/advisories/GHSA-4887-4jwp-327gmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.