Approved changes feed: RSS · Atom

cpe:2.3:a:freepbx:freepbx_framework:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFreepbx (d2522fe8-489d-5eaf-bf22-7a0d08f83c2b)
ProductFreepbx Framework (05ba74b6-3844-5d30-b380-6cec80107791)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-72578 vulnerable 2026-09-16 04:33:08.753758 FreePBX Framework - Missing CSRF Protection in Admin Panel Ajax Dispatcher
HIGH (8.8)
A cross-site request forgery (CSRF) vulnerability in FreePBX Framework 17.0 allows an unauthenticated remote attacker to perform administrative actions on behalf of an authenticated administrator.
Published: 2026-08-10T10:41:09.413Z
Updated: 2026-08-10T13:06:27.063Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.