CVE-2024-53564: Sangoma FreePBX

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability was discovered in FreePBX 17.0.19.17. It does not verify the type of uploaded (valid FreePBX module) files, allowing high-privilege administrators to insert unwanted files. NOTE: the Supplier's position is that there is no risk beyond what high-privilege administrators are intentionally allowed to do.

Affected products

• Sangoma FreePBX: version 17.0.19.17 only

Published 2024-12-02. Last modified 2026-06-17.