Known Vulnerabilities for Endpoint by FreePBX
Listed below are 10 of the newest known vulnerabilities associated with "Endpoint" by "FreePBX".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-85392 json | Peppermint through 0.5.5 contains an authorization bypass vulnerability in the GET /api/v1/auth/user/:id/logout endpoint that... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-85241 json | A weakness has been identified in SpecterOps BloodHound up to 9.5.1. The affected element is the function NewV2API of the fil... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-85237 json | A vulnerability in MISP's email-based one-time password (OTP) authentication flow allowed an attacker to perform an unrestric... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-85236 json | A cross-site request forgery (CSRF) vulnerability existed in the cullEmptyEvents action of MISP. The endpoint performed a sta... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-85221 json | MISP contains an improper TLS certificate validation vulnerability in CurlClient. The CurlClient::$verifyPeer property was no... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-85214 json | vhr fails to validate user authorization in the PUT /hr/info endpoint, allowing authenticated users to modify arbitrary HR pr... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-85210 json | Oppia's AdminRoleHandler GET endpoint in core/controllers/admin.py is decorated with open_access, allowing any registered use... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-85178 json | Helicone's VaultManager.getDecryptedProviderKeyById() function in the GET /v1/vault/key/{providerKeyId} endpoint fails to val... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-85174 json | SiYuan before v3.8.2 logs API tokens from query parameters in plaintext to an accessible log file when full-text search reque... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-85171 json | n8n before 1.123.73, 2.35.4, and 2.36.2 contains a credential exposure vulnerability in the Strapi, SeaTable, and Mailcheck n... | Not Provided | 2026-09-03 | 2026-09-03 |