FreePBX security advisory (AV26-973)
Canadian Cyber Centre advisory AV26-973 lists vulnerable FreePBX modules with fixed versions available in the 16.x and 17.x release lines.
The Canadian Centre for Cyber Security issued advisory AV26-973 on September 29, 2026, noting that FreePBX is affected by vulnerabilities in its music, ucp, soundlang, backup, superfecta, and api modules. Fixed versions vary by branch, for example music 16.0.4/17.0.6, ucp 16.0.39/17.0.6, backup 16.0.72/17.0.7, superfecta 16.0.40/17.0.7, and api 17.0.9. Users and administrators are encouraged to review the vendor advisory and apply updates.
- Affects FreePBX music, ucp, soundlang, backup, superfecta, and api modules
- Fixed versions differ across the 16.x and 17.x branches
- No exploitation mentioned; users urged to apply updates
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-973 Date: September 29, 2026 As of September 28, 2026, FreePBX is affected by vulnerabilities in the following products: music Prior to 16. 0. 4 Prior to 17.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.