PT-2026-23489 · Elevenlabs+1 · Elevenlabs Text-To-Speech+1

H00Die-Gr3Y · Published 2026-03-05 · Updated 2026-03-06 · CVE-2026-28209

Positive Technologies (AI Summary)

CVSS v4.0

7.5

High

Base vector

AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions FreePBX versions 16.0.17.2 through 16.0.20 FreePBX versions 17.0.2.4 through 17.0.5

Description FreePBX, an open source IP PBX, contains a command injection issue within the recordings module when utilizing the ElevenLabs Text-to-Speech (TTS) engine. The issue allows for potential unauthorized command execution.

Recommendations Update to FreePBX version 16.0.20 or later. Update to FreePBX version 17.0.5 or later.

Exploit

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-28209

GHSA-F558-MP87-58VJ

Affected Products

Elevenlabs Text-To-Speech

Freepbx

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/28xxx/CVE-2026-28209.json · Exploit
• https://github.com/FreePBX/security-reporting/security/advisories/GHSA-f558-mp87-58vj · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-28209 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28209 · Security Note
• https://t.me/CVEtracker/46474 · Telegram Post
• https://twitter.com/CVEnew/status/2029654717144412472 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2029763833351295238 · Twitter Post
• https://t.me/cveNotify/154517 · Telegram Post