VYPR

FreePBX Music on Hold module

by Freepbx

CVEs (1)

  • CVE-2026-45562HigSep 28, 2026
    risk 0.50cvss —epss —

    FreePBX is an open source IP PBX. Prior to versions 16.0.4 and 17.0.6, the FreePBX Music on Hold (MoH) module contains a critical security flaw that allows authenticated attackers to execute arbitrary system commands with the privileges of the Asterisk service. Authentication…