FreePBX security advisory (AV26-973)

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

  <div>
<div>
        <div><p><strong>Serial number: </strong>AV26-973<br /><strong>Date: </strong>September 29, 2026</p>

As of September 28, 2026, FreePBX is affected by vulnerabilities in the following products:

  • music
    • Prior to 16.0.4
    • Prior to 17.0.6
  • ucp
    • Prior to 16.0.39
    • Prior to 17.0.6
  • soundlang
    • Prior to 17.0.5
    • Prior to 16.0.10
  • backup
    • Prior to 16.0.72
    • Prior to 17.0.7
  • superfecta
    • Prior to 16.0.40
    • Prior to 17.0.7
  • api
    • Prior to 17.0.9

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

</div>

Article Link: FreePBX security advisory (AV26-973) - Canadian Centre for Cyber Security