Zero Day MonitorZDM

← Back to list

EST

PRE-CVEPATCHED

freepbx · security-reporting ucp

Unauthenticated Remote Code Execution in FreePBX UCP via Socket.IO Namespace Auth Bypass and AMI Action Injection

72% confidence

Description

Unauthenticated remote code execution in FreePBX UCP via socket.io namespace auth bypass and AMI action injection

Affected Products

Vendor	Product	Versions
freepbx	security-reporting ucp	< 17.0.9

Related News (1 articles)

Tier B

CCCS Canada72d ago

FreePBX security advisory (AV26–711)

→ No new info (linked only)

Discussion (0)

Loading…

CISA KEV❌ No

Actively exploited❌ No

Patch available

17.0.9

PublishedJul 17, 2026

Last enriched72d ago

Tags

rceauth-bypassami-injection

Trending Score0

Source articles1

Independent1

Info Completeness6/14

Missing: cve_id, cvss, epss, cwe, kev, exploit, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

NONECVE-2026-73660

FreePBX: Authenticated TTS AGI Command Injection Through TTS Name

NONECVE-2026-73662

Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files

NONECVE-2026-73661

FreePBX: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup

NONECVE-2026-73664

FreePBX: Authenticated Arbitrary SSH Key Injection via Backup Module

NONECVE-2026-73665

FreePBX UCP: Unauthenticated remote code execution via socket.io namespace auth bypass and AMI action injection

Pin to Dashboard

Verification

State: reported

Confidence: 72%

Vulnerability Timeline

CVE Published

Jul 17, 2026

Patch Available

Jul 17, 2026

Discovered by ZDM

Jul 17, 2026