Known Vulnerabilities for Security-reporting by FreePBX
Listed below are 10 of the newest known vulnerabilities associated with "Security-reporting" by "FreePBX".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-34406 json | APTRS (Automated Penetration Testing Reporting System) is a Python and Django-based automated reporting tool designed for pen... | Not Provided | 2026-03-31 | 2026-04-03 |
| CVE-2026-21821 json | The HCL BigFix SCM Reporting site contains an outdated and unsupported version of the jQuery 1.x library. Since jQuery 1.x ha... | Not Provided | 2026-05-13 | 2026-05-14 |
| CVE-2026-11120 json | Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7827.53 allowed a remote a... | Not Provided | 2026-06-04 | 2026-06-08 |
| CVE-2026-8435 json | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file approveVe... | Not Provided | 2026-05-21 | 2026-05-22 |
| CVE-2026-8434 json | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescanMul... | Not Provided | 2026-05-21 | 2026-05-22 |
| CVE-2026-8433 json | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescan().... | Not Provided | 2026-05-21 | 2026-05-22 |
| CVE-2026-8432 json | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file star(). T... | Not Provided | 2026-05-21 | 2026-05-22 |
| CVE-2026-8428 json | Concrete CMS 9.5.0 and below emits a CSRF token in the local_available_update.php view ($token->output('do_update')) but the ... | Not Provided | 2026-05-21 | 2026-05-22 |
| CVE-2026-8427 json | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file removeFav... | Not Provided | 2026-05-21 | 2026-05-22 |
| CVE-2026-8426 json | Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/update/prepare_re... | Not Provided | 2026-05-21 | 2026-05-22 |